PrestaShop Login Stealer
Moe O Lately, we’ve noticed an increase of login credentials stealing attempts and techniques targeting e-commerce based websites. These websites usually have sensitive information (credit card &…
Details on the Privilege Escalation Vulnerability in Joomla
Marc-Alexandre Montpas Yesterday, Joomla! 3.6.4 was released, patching a critical privilege escalation and arbitrary account creation vulnerability. As we’ve seen some exploits attempts occurring in the wild,…
Magento Login credentials stealer
While investigating a compromised Magento-based ecommerce website, we found a malicious code that’s being used to steal and maintain unauthorized access to user accounts. This…
Joomla Account Creation Vulnerability
Daniel Cid The Joomla team released a patch for a serious security vulnerability affecting all Joomla versions from 3.4.4 and up. If you’re using one of these…
Malicious WordPress Subdirectory Installs For SEO Spam
Fernando Barbosa Remediating over 500 infected sites per day, we see attacks executed at varying levels of complexity. The tactics attackers use to compromise a site provide…
Malicious Redirections on Disabled Sites
Cesar Anjos It’s quite common for attackers to compromise your website and make use of it for their phishing campaigns. The most typical method they use is…
Backdoor abusing of PHP tricks
During an incident response process, we found a very interesting malicious code abusing some PHP tricks. Attackers placed the malware at the end of a…
Credentials Stealer on Prestashop
Conrado Torquato In a matter of hours, a big e-commerce website can have hundreds of credit card numbers stolen and used by attackers on other websites around…
Backdoors abusing of spaces
Lately we’ve seen more backdoors that have some specific characteristics, like using several spaces between the code and processing information coming from POST requests. Attackers…
Accounting for Defense in Depth in Website Security
Tony Perez In the field of Information Security (InfoSec) we like to use the phrase defense in depth. Like many things, it is a borrowed term with…
Session Stealer Script on OpenCart CMS
Bruno Zanelato With so many open-source ecommerce platforms available in the market, creating an online shop is as easy as ABC. In less than five minutes you…