Combat Black Hat SEO Infections with SEO Insights
Alycia Mitchell Black hat SEO spam is the plague of the internet, and the big search engines take it seriously. One of the worst spam tactics on…
Malicious iFrame Injector Found in Adobe Flash File (.SWF)
Peter Gramantik Finding malware in Adobe Flash files (.swf) is nothing new, but it usually affects personal computers, not servers. Typically, a hidden iframe is used to…
Most Common Attacks Affecting Today’s Websites
Joseph Herbrandson New web-based attack types and vectors are coming out every day, this is causing businesses, communities and individuals to take security seriously now more than…
Spotting Malicious Injections in Otherwise Benign Code
Denis Sinegubko Being able to spot suspicious code, and then determine whether it is benign or malicious is a very important skill for a security researcher. Every…
Security Advisory – Medium Severity – WP eCommerce WordPress Plugin
Mickael Nadeau If you’re using the popular WP eCommerce WordPress plugin (2,900,000 downloads), you should update it right away. During a routine audit for our Website Firewall…
Drupal Warns – Every Drupal 7 Website Compromised Unless Patched
Daniel Cid The Drupal team released an update to a critical SQL Injection vulnerability a few weeks ago and urged all their users to update or patch…
Threat Introduced via Browser Extensions
We love investigating unusual hacks. There are so many ways to compromise a website, but often it’s the same thing. When we see malicious code…
ASP Backdoors? Sure! It’s not just about PHP
I recently came to the realization that it might appear that we’re partial to PHP and WordPress. This realization has brought about an overwhelming need…
Google Blacklists Bit.ly
If you ever shortened a URL using bit.ly or if you use it anywhere, be aware that Google recently blacklisted all bit.ly pages through its…
Popular Brazilian Site “Porta dos Fundos” Hacked
A very well known Brazilian comedy site, “Porta dos Fundos,” was recently hacked and is pushing malware (drive-by-download) via a malicious Flash executable, as you…
Manipulating WordPress Plugin Functions to Inject Malware
Keir Desailly Most authors of website malware usually rely on the same tricks, making it easy for malware researchers to spot obfuscated code, random files that don’t…