Finding Conditional Drupal Database Spam
Fioravante Souza Nobody likes spam. It’s never fun (unless you’re watching Monty Python). For us it comes with the territory; removing SEO spam has been at the…
Hiding Links Behind Punctuation Marks
Denis Sinegubko In black hat SEO schemes, some links don’t have to have descriptive anchor keywords. For example, if their only purpose is help search engine crawlers…
Analyzing ImageTragick Exploits in the Wild
Daniel Cid Three days ago the ImageMagic (also known as, ImageTragick) vulnerability was released to the world. We’ve been actively monitoring this vulnerability, and have discovered a…
Host’s Alternative Domain Names May Hide Malware
To make malicious injections look less suspicious, hackers like to use domains that look credible. It may be some typo domain like google-analystisc[.]com instead of…
WordPress Redirect Hack via Test0.com/Default7.com
Update 9/14/16: We released a new guide that provides better instructions on how to clean a hacked WordPress site using the Free WordPress security plugin.…
ImageMagick Remote Command Execution Vulnerability
ImageMagick is a popular software used to convert, edit and manipulate images. It has libraries for all common programming languages, including PHP, Python, Ruby and…
Security Advisory: Stored XSS in bbPress
Marc-Alexandre Montpas During regular research audits of our Sucuri Firewall, we discovered a Stored XSS vulnerability affecting the bbPress plugin for WordPress which is currently installed on…
Cloned Websites Stealing Google Rankings
Cesar Anjos We often speak of black hat SEO tactics and content scraping sites are just one example of such tactics. Scraping is the act of copying…
Credit Card Stealer on osCommerce
Ahmad Azizan Idris We regularly detect malware that targets payment modules on compromised ecommerce websites, mainly on Magento. Recently we’ve stumbled upon the same threat on osCommerce. The…
How to Find & Fix Mixed Content Issues with SSL / HTTPS
Tony Perez Update: If you need help transitioning your website from HTTP to HTTPS, check out our guide on how to install an SSL certificate. What is Mixed…
Excessive Resource Usage by Replica Spam
Bruno Zanelato Chinese replica spam campaigns aim for large number of doorways per infected site. And quite often their doorways are static, which means hundreds of thousands…