Massive Admedia/Adverting iFrame Infection
Denis Sinegubko This past weekend we registered a spike in WordPress infections where hackers injected encrypted code at the end of all legitimate .js files. The distinguishing…
The Risks of Hiring a Bad SEO Company
Keir Desailly Today we are not going to explore malware or any other overtly malicious traffic. Instead this post is a warning about dishonest marketing tactics used…
Encrypted Cc.php with credit card stealing code
The Magento Shoplift vulnerability had been patched about a year ago. And all this time we have been cleaning various Magento infections that steal customer…
Security Advisory: Stored XSS in Magento
Marc-Alexandre Montpas During our regular research audits for our Cloud-based WAF, we discovered a Stored XSS vulnerability affecting the Magento platform that can be easily exploited remotely.…
Server Security: OSSEC Integrates Slack and PagerDuty
Daniel Cid We leverage OSSEC extensively to help monitor and protect our servers. If you are not familiar with OSSEC, it is an open source Intrusion Detection System…
Ransomware Strikes Websites
Ben Martin Ransomware is one of the most insidious types of malware that one can come across. These infections will encrypt all files on the target computer…
Obfuscating display:none cloaking
We’ve seen lots of JavaScript tricks that hide injected spam from human visitors while making it look “visible” for search engines. The most popular approach…
Speeding up indexing of SPAM files via sitemap.xml
Yuliyan Tsvetkov Remember the wave of HTML files infection back in 2015 affecting outdated WordPress sites? Now it came back more powerful, with more files uploaded via…
Malicious Pastebin Replacement for jQuery
Website hackers are always changing tactics and borrowing ideas from each other. One of the challenges of website security is staying on top of those…
Fake AdWords Domain Advertises USA Immigration Service
You might know Google popular services: Google Ads, AdSense and DoubleClick. You might even know scripts and domains they use. For example, DoubleClick loads scripts…
Hiding spam from Ahrefs and Majestic
Many black hat SEO campaigns use cloaking on hacked sites. Malicious scripts only inject spammy content when search engine crawlers request web pages on compromised…