The Dangers External Services Present To Your Website
Tony Perez Today the Washington Post reported that they were victims of hack, orchestrated by the Syrian Electronic Army. This attack is interesting because it sheds light…
Joomla Hacks – Part I – Phishing
Joomla is a very popular open source CMS, dominating approximately 10% of the website market. While great for them, horrible for many others, as being…
Open Source Backdoor – Copyrighted Under GNU GPL
Rodrigo Escobar Malware code can be very small, and the impact can be very severe! In our daily tasks we find a lot of web-based malware that…
OpenX.org Compromised and Downloads Injected with a Backdoor
Daniel Cid We received reports that OpenX.org was compromised and the OpenX download files had a backdoor injected in them. According to Heise (in German), the malicious…
New WordPress and Joomla Updates Available
David Dede If you are a WordPress or Joomla user, you better start updating your sites now. Joomla 2.5.14 Joomla 2.5.14 was released containing some critical security…
More Creative Backdoors – Using Filename Typos
Estevao Avillez When a site gets compromised, one thing we know for sure is that the attackers will leave some piece of malware in there to allow…
HideMeBetter – SPAM injection Variant
Compromised sites being injected with SPAM SEO is something we deal very often. A few months ago we wrote about a wave of SPAM injections…
Phishing 2.0 – Credit Card Redirection on Compromised Sites
We have seen it all when it comes to compromised sites: from silly defacements, to malware, spam, phishing and all sorts of injections. However, the…
Sucuri CloudProxy Web Application Firewall (WAF) – Out of Beta
We are happy to announce that after more than a year in testing, Sucuri’s Cloud WAF is out of beta. CloudProxy is currently available to…
Dissecting a WordPress Brute Force Attack
Update: Brute force protection now available: http://cloudproxy.sucuri.net/brute-force-protection Over the past few months there has been a lot of discussion about WordPress Brute Force attacks. With…
Ubuntu Forums Hacked
Ubuntu’s official forum web site (ubuntuforums.org) was hacked, defaced and all user names and passwords stolen. The forum was very popular with over 1.8 million…