New iFrame Injections Leverage PNG Image Metadata
Peter Gramantik We’re always trying to stay ahead of the latest trends, and today we caught a very interesting one that we have either been missing, or…
Browsing Category
WordPress Security
698 posts
Recent OptimizePress Vulnerability Being Mass Infected
Daniel Cid A few weeks ago we wrote about a file upload vulnerability in the OptmizePress theme. We were seeing a few sites being compromised by it,…
WordPress OptimizePress Theme – File Upload Vulnerability
Denis Sinegubko We’re a few days short on this, but it’s still worth releasing as the number of attacks against this vulnerability are increasing ten-fold. The folks…
Phishing Emails to Install Malicious WordPress Plugins
When all else fails, the bad guys can always rely on some basic social engineering tactics with a little hit of phishing!! Over the weekend,…
Stealing Credit Cards – A WordPress and vBulletin Hack
Tony Perez What better way to celebrate Thanksgiving than to share an interesting case that involves two of the most popular CMS applications out there – vBulletin…
Another Fake WordPress Plugin – And Yet Another SPAM Infection!
We clean hundreds and thousands of infected websites, a lot of the cleanups can be considered to be somewhat “routine”. If you follow our blog,…
The Story of Clip:rect – A Black Hat SEO Trick
We regularly write about Black Hat SEO hacks here. Such hacks help hackers monetize their access to compromised sites by incorporating them into massive schemes…
Case Study: Analyzing a WordPress Attack – Dissecting the webr00t cgi shell – Part I
November 1st started like any other day on the web. Billions of requests were being shot virtually between servers in safe and not so safe…
Cleaning Up Your WordPress Site with the Free Sucuri Plugin
Update 9/9/16: We released a new guide to cleaning a hacked WordPress site with our plugin. If your site has been recently hacked and you…
Sucuri CloudProxy WAF Plugin for WordPress
If you are using our CloudProxy WAF to protect your WordPress websites, we highly recommend that you also install our new CloudProxy plugin for WordPress.…
WordPress Database Table and wp_head Injections
There are multiple places where a malware injection can be hidden on a web site. On WordPress, for example, it can be hidden inside the…