Drupal Database WebShell
Bruno Zanelato Some people are unfamiliar with the Drupal CMS, it doesn’t enjoy the popularity that some others do like WordPress and Joomla, but it’s a powerful…
Spotlight: Protecting Brand Reputation with Melbourne SEO and Video
Alycia Mitchell One of our very first case studies came to us from David Jenyns, founder of Melbourne SEO Services and Melbourne Video Production. His team creates…
Cleaning the Wp-Page Pharma Hack in WordPress
Tony Perez Pharma hacks are common website infections categorized under SEO spam. With pharma hacks, the attacker exploits vulnerable websites to distribute pharmaceutical content to search engines…
IoT Home Router Botnet Leveraged in Large DDoS Attack
Daniel Cid We have been monitoring a large-scale Layer 7 HTTPS flood attack (i.e., application level DDoS) against a customer over the past few weeks. It is…
Joomla Backdoor Hidden in Plain Sight
Douglas Santos In order to avoid detection and maintain access to compromised websites, attackers use different techniques to hide their malicious code. During our cleanup investigation we…
Ask Sucuri: How Modern Web Phishing Works
Peter Gramantik Most of us have experienced some kind of phishing attempt in our online lives, and we have seen phishing grow in complexity. Usually, we notice…
IPv4 vs IPv6 Performance Comparison
IPv6 usage has been growing very slowly through the last 10 to 15 years. Since mid-2015 it started to pick up and increase adoption at…
And the next time, go upload a shell to your gramma’s website!
Estevao Avillez During an incident response process performed in our client’s website, one of our analysts found a very interesting web shell. Our tools detected a suspicious…
Stealing Credit Card Details from PrestaShop
Denis Sinegubko We wrote multiple times about various attacks on e-commerce sites that try to steal credit card details of their customers. In most cases, all such…
Spotlight: How WebMechanix Provides Client Site Security
WebMechanix is a full-service digital marketing agency focused on managing the online presences of over 100 web properties. In 2009, when WebMechanix was founded, managing…
Undeletable Doorway. Kind of.
Recently we cleaned a site that had a malicious wp-page.php file at the root of the WordPress site. It was responsible for pharma spam doorways…