Magento Credit Card Swiper Exports to Image
Ben Martin Over the past year we have seen a rash of credit card swipers in Magento and other ecommerce-based websites. In fact, we have been finding…
WP Marketplace Attack in the Wild
Denis Sinegubko A few days ago, colleagues from White Fir Design disclosed an arbitrary file upload vulnerability in the WP Marketplace plugin and helped remove it from…
Security Through Confusion – The FUD Factor
Daniel Cid The FUD factor has been employed by sales and marketing teams from multiple industries for decades. It stands for fear, uncertainty, and doubt (FUD) and…
Ask Sucuri: Is My Website Hacked?
Tony Perez Having your website hacked can be a devastating experience for any website owner. Unfortunately, many website owners rarely know they are infected until days, if…
Mage.js CC Stealer. The Database Version.
Yuliyan Tsvetkov Every day we find many Magento credit card stealers injected into different files: modules, core files, themes. Magento database is not an an exception. For…
Labs Notes Monthly Recap – Sep/2016
Estevao Avillez Sharing what we learn in the form of content and tools has been a staple here at Sucuri since our inception. Our greatest challenge is having…
WordPress Hack Modifies Core Files to Share Spam
Bruno Zanelato One of the worst feelings a website owner can experience is discovering that your site has been hacked. Without proper security measures in place, even…
Spotlight: How Softwear Systems Provides Drupal Security
Alycia Mitchell In the early 1980’s Softwear Systems opened up as a custom software company in Chicago. Over the years, its founder Mitch Meyers, learned how to…
Magento as a Phishing Spam Sending Tool
Cesar Anjos The most typical reasons for Magento websites to get compromised are to steal credit card information or to find a way to divert payments to…
Targeting mobile devices the easy way
Peter Gramantik With the outburst of mobile-only malware, we’re seeing a lot of mobile-devices targeted campaigns in last years. There are lot of ways how to make…
SSH Brute Force Compromises Leading to DDoS
A few weeks ago we ran an experiment to see how long it would take for some IPv4-only and IPv6-only servers to be compromised via…