PHP Callback Functions: Another Way to Hide Backdoors
Peter Gramantik We often find new techniques employed by malware authors. Some are very interesting, others are pretty funny, and then there are those that really stump…
Joomla Plugin Constructor Backdoor
Denis Sinegubko We recently wrote about backdoors in pirated commercial WordPress plugins. This time it will be a short post about an interesting backdoor we found in…
HeartBleed in the Wild
Daniel Cid As most of you probably already know, ten days ago security researchers disclosed a very serious vulnerability in the OpenSSL library, which is used to…
Double hidden style – Hiding spam
We see many tricks that hackers use to make search engine bots think that the injected spam is not hidden. One of the common approaches…
Critical Update for JetPack WordPress Plugin
The Jetpack team just released a critical security update to fix a security vulnerability in the Jetpack WordPress plugin. The vulnerability allows an attacker to…
Patching The Heartbleed OpenSSL Vulnerability
Security Researchers have discovered a very serious vulnerability in the OpenSSL library that is used to power HTTPS on most websites. Many news sources are…
Ad Violations: Why Search Engines Won’t Display Your Site If it’s Infected With Malware
David Dede As your website’s webmaster have you ever seen an e-mail from Google like this?: Hello, We wanted to alert you that one of your sites…
Thumb Wars: Sucuri Acquires Google Webmaster Tools
Dre Armeda Today Sucuri unofficially acquires Google Webmaster Tools. In an effort to combine forces of good, Sucuri officials challenged Google to a thumb wrestling war. Here…
JCE Joomla Extension Attacks in the Wild
Our friends from SpiderLabs, issued a warning today on their blog about increased activity on their honeypots looking to exploit the old JCE (Joomla Content…
Unmasking “Free” Premium WordPress Plugins
WordPress has a large repository of free plugins (currently 30,000+) that can add almost any functionality to your blog. However, there is still a market…
Windigo Linux Analysis – Ebury and Cdorked
Our friends over at ESET released a very detailed document about the Windigo Operation. The Windigo Operation has been responsible for the compromise of thousands…