Ask Sucuri: How to Create Website Backups?
Ben Martin Recently I had the good fortune of being able to present at Wordcamp Vancouver 2015. My presentation was titled ‘Why Security Matters‘ and I mentioned…
Malicious Google Search Console Verifications
Denis Sinegubko This past summer we noticed a trend of more and more Blackhat SEO hacks trying to verify additional accounts as owners of compromised sites in Google Search…
Hacked Sites Help Hack Third-Party Sites
Just a reminder that your hacked site may be used to anonymously hack third-party sites. This Joomla com_Myblog exploit script was found on one hacked…
visitorTracker spam-seo injector wave corrupts sites
Peter Gramantik Recently, we\’re seeing an increasing visitorTracker malware wave. Moreover, there are lot of corrupted infections out there, breaking the infected sites. Right now, the malicious…
Analyzing Popular Layer 7 Application DDoS Attacks
Daniel Cid Distributed Denial of Service (DDoS) attacks have been a major concern for website owners for a while. All types of sites, from small to big,…
Secondtds.mooo[.]com .htaccess redirects
Krasimir Konov We are finding many sites infected with malicious redirects inside the .htaccess file, to secondtds.mooo[.]com/go.php?sid=3. That domain is a TDS (traffic controller) which redirects visitors…
GCCanada.com Malware
We are seeing a large amount of sites with a malscript from gccanada.com injected into them. The malware redirects visitors to searchmagnified.com, which redirects them…
Tag-cloud-generator com script redirects to parked domains
Today we found a few websites that loaded strange code from tag-cloud-generator[.]com. Sites tried load several image and font files from this site, but they…
Fake Social Share WordPress Plugin Creates Pharma Spam Doorways
We found infected sites where malware created a fake WordPress plugin that generated pharma spam doorways. Path: wp-content/plugins/social-share/wp-social-share.php This file creates wp-content/plugins/social-share/share.php that calls itself…
FunWebProducts UserAgent Bloating Traffic
Alycia Mitchell Every once in a while we get a case that makes us dig deep to find answers. We have spoken before about the trouble with…
Wigo Means Bingo for Blackseo Agent
This week my colleague Peter Gramantik showed me a few infected sites that had very similar code embedded in the WordPress index.php files: if (eregi(‘-dbst’,$_SERVER[‘REQUEST_URI’]))…