PCI for SMB – Requirement 2- Do Not Use Defaults
Daniel Cid Update: Read our new PCI Compliance guide. If you have an ecommerce website and you accept credit cards from your clients, you probably already heard…
Out-of-Site Drupal Malware
Cesar Anjos We recently wrote about a Drupal black-hat SEO hack that among other things redirected users coming from Google to botscache[.]com site. It hijacked the bootstrapping…
Realstatistics Malware Campaign Uses Fake Analytics Sites
Denis Sinegubko In this post we’ll show you the tactics employed by the realstatistics malware campaign to make their injections seem less suspicious. The injection looks like…
Realstatistics Malware Campaign Leads To Ransomware
Our Incident Response Team (IRT) has been tracking a mass infection campaign over the last two weeks ( codenamed “Realstatistics“). This campaign has compromised thousands of websites built…
Straightforward Backdoor Installer
Malware uses encryption, obfuscation and other tricks to prevent its detection so that the compromised sites stay infected for as long as possible. Quite often…
Spotlight: WPBeginner’s Approach to WordPress Security
Alycia Mitchell WPBeginner offers tutorials, tips, and tricks for WordPress beginners to improve their sites. With over 150K Twitter followers and almost 10 million monthly visitors, the…
Another Magento CC stealer
Lately we’ve been analysing multiple credit card stealers for Magento. We are seeing an increase trend there as attackers can more easily monetize a compromised…
200k+ Parked/Expired Domains Used to Distribute Malicious Ads
Douglas Santos Recently we wrote about domain renewal scams that used real paper letters to tricks site owners into transferring their domains and renewing them for 3-4x…
Large CCTV Botnet Leveraged in DDoS Attacks
Our security operations team investigate and mitigate multiple denial-of-service (DDoS) attacks every single day. One recent case caught our attention because of the intensity and duration of…
PCI Compliance for eCommerce – Choosing Between SAQ A and A-EP
Tony Perez Update: Read our new PCI Compliance guide. The Payment Card Industry Data Security Standards (PCI DSS) is a set of security standards established in a…
Domain Renewal Phishing Scams
Update: I received another letter this year (May 2017). Seems iDNS Canada is still in business. When I received a letter in the mail asking…