Not Just Pills or Payday Loans, It’s Essay SEO SPAM!
Estevao Avillez Remember back in school or college when you had to write pages and pages of long essays, but had no time to write them? Or…
Joomla JomSocial Remote Code Execution Vulnerability
Daniel Cid The JomSocial team just released an update that fixes a very serious remote code execution vulnerability that affects any JomSocial version older than 3.1.0.4. From…
Darkleech + Bitly.com = Insightful Statistics
Denis Sinegubko This post is about how hackers abuse popular web services and how this helps security researchers obtain interesting statistics about malware attacks. We, at Sucuri,…
Layer 7 DDOS – Blocking HTTP Flood Attacks
There are many types of Distributed Denial of Service (DDOS) attacks that can affect and bring down a website, and they vary in complexity and…
Many Pieces of a Puzzle: Target, Neiman Marcus and Website Hacking
David Dede Corporations get hacked all the time. This is not news to anyone in the security business, but it has certainly received a lot of attention…
New iFrame Injections Leverage PNG Image Metadata
Peter Gramantik We’re always trying to stay ahead of the latest trends, and today we caught a very interesting one that we have either been missing, or…
Website Mesh Networks Distributing Malware
Can you imagine having the keys to a kingdom? How awesome would that be!! This is true in all domains, especialy when it comes to…
Recent OptimizePress Vulnerability Being Mass Infected
A few weeks ago we wrote about a file upload vulnerability in the OptmizePress theme. We were seeing a few sites being compromised by it,…
The Hidden Backdoors to the City of Cron
Fioravante Souza An attacker’s key to creating a profitable malware campaign is persistence. Malicious code that is easily detected and removed will not generate enough value for…
One way of hidding an iframe
There are multiple ways to inject an iframe on a web site, and every day we found a new evasion technique to make it harder…
Sucuri Company Meeting – Brazil 2014
Dre Armeda 2013 was a great year for Sucuri! We were able to add some great services and tools like CloudProxy to help website owners and administrators…