Dissecting a WordPress Brute Force Attack
Tony Perez Update: Brute force protection now available: http://cloudproxy.sucuri.net/brute-force-protection Over the past few months there has been a lot of discussion about WordPress Brute Force attacks. With…
Ubuntu Forums Hacked
David Dede Ubuntu’s official forum web site (ubuntuforums.org) was hacked, defaced and all user names and passwords stolen. The forum was very popular with over 1.8 million…
From a Site Compromise to Full Root Access – Bad Server Management – Part III
Daniel Cid When an attacker manages to compromise and get access to a website, they won’t stop there. They will aim to gain full root (admin) access…
Malware Hidden Inside JPG EXIF Headers
A few days ago, Peter Gramantik from our research team found a very interesting backdoor on a compromised site. This backdoor didn’t rely on the…
SSH Brute Force – The 10 Year Old Attack That Still Persists
Three years later we are still seeing SSH brute force attacks compromising sites on a frequent basis. One of the first server-level compromises I had…
Fake piwik domain – piwik-stat
Piwik is an open source web analytics software that is used by many web masters. Andthe bad guys are using their popularity to try to…
ESET Blacklist Results Added to SiteCheck
If you did a SiteCheck scan today, you probably saw a new entry in the Blacklist tab for ESET. ESET has been a good friend…
New juquery.com injection
Fioravante Souza Today we found a malicious iframe that was being loaded from juquery.com (another fake jquery site). Itconsisted of the following code hidden inside one of…
vBulletin Infections from Adabeupdate
vBulletin is a popular forum platform that is also starting to become a popular target for web attacks. vBulletin (and vbSEO) had some serious security…
Malware Infection – Blocked by Day Limit
Estevao Avillez This week while working on a compromised site, I found an interesting variation of the Blackhole injection. We work with many sites injected with Blackhole,…
Google Transparency Report – Malware Distribution
Google just released their Malware Distribution Transparency Report, sharing the amount of sites compromised or distributing malware detected by their systems (Safe Browsing program). Google’s…