Desktop AVs and Website Security
Rafael Capovilla Brian Dye recently told Wall Street Journal that antivirus tools (like his company Norton) are effectively “dead” because they catch less than half of all…
Watch a Layer 7 DDOS Attack – WordPress Security
Estevao Avillez A few weeks back we reported on very large Layer 7 DDOS attacks within the WordPress ecosystem. Today we decided to provide you a little…
Case Study: Analyzing the Origins of a DDoS Attack
Daniel Cid Recently a client was experiencing a massive layer 7 DDOS attack, generating tens of thousands of random HTTP requests per second to the server. The…
Does Sucuri Work With My Host? Yes, Yes We Do.
David Dede We’ve been scanning and removing malware from websites for years and in this time frame we have seen the website security domain grow by leaps…
SiteCheck Extended – Making It Easier to Scan Your Websites
Sucuri SiteCheck is our free website malware scanner that crawls any website to detect signs of malware injections, SEO spam, blacklisting, defacement and other similar…
AdSense Blackmail – Hacking Websites for Profit
We deal with different types of malware injections and compromises everyday and the most common question our clients ask us is, “Why me? Why my…
PHP Callback Functions: Another Way to Hide Backdoors
Peter Gramantik We often find new techniques employed by malware authors. Some are very interesting, others are pretty funny, and then there are those that really stump…
Joomla Plugin Constructor Backdoor
Denis Sinegubko We recently wrote about backdoors in pirated commercial WordPress plugins. This time it will be a short post about an interesting backdoor we found in…
HeartBleed in the Wild
As most of you probably already know, ten days ago security researchers disclosed a very serious vulnerability in the OpenSSL library, which is used to…
Double hidden style – Hiding spam
We see many tricks that hackers use to make search engine bots think that the injected spam is not hidden. One of the common approaches…
Critical Update for JetPack WordPress Plugin
The Jetpack team just released a critical security update to fix a security vulnerability in the Jetpack WordPress plugin. The vulnerability allows an attacker to…