SEO Poisoning on nulled templates
Cesar Anjos We at Sucuri, always stress the risks associated with using themes, plugins or any add-on downloaded from unofficial sources (Nulled Versions). During our investigation process,…
The Growing DDoS Threat to Website Owners
Tony Perez As website attacks continue to evolve, we see growing levels of sophistication in the way attackers are expanding the economics of their industry. The monetization…
MiniCMS as a Spam Site Generator
Douglas Santos SEO spam is very common for a reason — money. Spammers are paid to promote websites on Google. We deal with lots of SEO spam…
Blacklist Monitoring for Hackers and Webmasters
Krasimir Konov An infected site can be efficient for cyber-criminals unless it gets blacklisted. Traffic significantly drops when a URL is on the Google’s Safe Browsing list.…
Phishers Abuse Hosting Temporary URLs
Denis Sinegubko Recently we told you how hackers use alternative domain names provided by web hosts to make their URLs look less suspicious. This time we’ll show…
Another sample of a Magento compromise for profit
John Castro We are often seeing malicious code being used to steal credit card details and sensitive information from compromised Magento sites, but this one caught our…
Magento Credit Card Stealer for Braintree Extension
We regularly find and write about malware that steals credit card details from Magento sites because attackers discover new techniques to obtain sensitive data daily.…
WP Mobile Detector Vulnerability Being Exploited in the Wild
***Update: The WP Mobile Detector plugin has been patched to address the vulnerability. Please update as soon as possible. Note that the latest version don’t…
Infected websites being used to distributed denial of service attacks
Bruno Zanelato After a website is compromised, it can be misused in multiple ways. We often see it being used on Spam SEO campaigns or to distribute…
Drupal SQLi (Drupalgeddon) Attack Trend CVE-2014-3704 / SA-CORE-2014-005
Daniel Cid It has been over 19 months since Drupalgeddon, which refers to Drupal’s Security Advisory (SA) SA-CORE-2014-005. For those unfamiliar with it, it was a highly…
File Uploader in Drupal Database
Fernando Barbosa It’s very common to see backdoors such as uploaders among site’s files. However, we have seen more often cases where file uploaders, mainly in Drupal…