Website Security News

New Malware Campaign – WPcache-Blogger – Affects Thousands more WordPress Websites via RevSlider

Daniel Cid

December 24, 2014

If SoakSoak wasn’t enough, we are starting to see a new malware campaign leveraging the RevSlider vulnerability and compromising thousands of WordPress sites in the…

Read the Post

SoakSoak Campaign Evolves – New Wave of Attacks

Denis Sinegubko

December 22, 2014

Since Sunday, we have seen a new wave of SoakSoak reinfections. The Javascript continues to evolve and load other scripts in order to infect additional…

Read the Post

SoakSoak: Payload Analysis – Evolution of Compromised Sites – IE 11

Denis Sinegubko

December 16, 2014

Thousands of WordPress sites have been hit by the SoakSoak attack lately. At this moment we know quite a lot about it; it uses the…

Read the Post

RevSlider Vulnerability Leads To Massive WordPress SoakSoak Compromise

Daniel Cid

December 15, 2014

Yesterday we disclosed a large malware campaign targeting and compromising over 100,000 WordPress sites, and growing by the hour. It was named SoakSoak due to…

Read the Post

SoakSoak Malware Compromises 100,000+ WordPress Websites

Tony Perez

December 14, 2014

This Sunday has started with a bang. Google has blacklisted over 11,000 domains with this latest malware campaign from SoakSoak.ru: Our analysis is showing impacts…

Read the Post

Malvertising on a Website Without Ads

Fioravante Souza

December 12, 2014

When you first configure your website, whether it be WordPress, Joomla, Drupal, or any other flavor of the month, it is often in its purest…

Read the Post

Targeted Phishing Against GoDaddy Customers

Marc Kranat

December 11, 2014

I do get a lot of phishing emails, we all do, but as security professionals we tend to recognize them immediately. Either the syntax is…

Read the Post

Critical Vulnerability Affecting HD FLV Player

Marc-Alexandre Montpas

December 10, 2014

We’ve been notified of a critical vulnerability affecting the HD FLV Player plugin for Joomla, WordPress and custom websites. It was silently patched on Joomla…

Read the Post

IIS, Compromised GoDaddy Servers, and Cyber Monday Spam

Denis Sinegubko

December 8, 2014

While doing an analysis of one black-hat SEO doorway on a hacked site, I noticed that it linked to many similar doorways on other websites,…

Read the Post

Leveraging the WordPress Platform for SPAM

Keir Desailly

December 5, 2014

We’ve all seen WordPress comment and pingback spam, but thanks to strict moderation regimes and brilliant WordPress plugins that focus strictly on SPAM comments, comment…

Read the Post

Security Advisory – High Severity– WordPress Download Manager

Mickael Nadeau

December 3, 2014

If you’re using the popular WP Download Manager plugin (around 850,000 downloads), you should update right away. During a routine audit for our Website Firewall…

Read the Post