New WordPress and Joomla Updates Available
David Dede If you are a WordPress or Joomla user, you better start updating your sites now. Joomla 2.5.14 Joomla 2.5.14 was released containing some critical security…
More Creative Backdoors – Using Filename Typos
Estevao Avillez When a site gets compromised, one thing we know for sure is that the attackers will leave some piece of malware in there to allow…
HideMeBetter – SPAM injection Variant
Rodrigo Escobar Compromised sites being injected with SPAM SEO is something we deal very often. A few months ago we wrote about a wave of SPAM injections…
Phishing 2.0 – Credit Card Redirection on Compromised Sites
Daniel Cid We have seen it all when it comes to compromised sites: from silly defacements, to malware, spam, phishing and all sorts of injections. However, the…
Sucuri CloudProxy Web Application Firewall (WAF) – Out of Beta
We are happy to announce that after more than a year in testing, Sucuri’s Cloud WAF is out of beta. CloudProxy is currently available to…
Dissecting a WordPress Brute Force Attack
Tony Perez Update: Brute force protection now available: http://cloudproxy.sucuri.net/brute-force-protection Over the past few months there has been a lot of discussion about WordPress Brute Force attacks. With…
Ubuntu Forums Hacked
Ubuntu’s official forum web site (ubuntuforums.org) was hacked, defaced and all user names and passwords stolen. The forum was very popular with over 1.8 million…
From a Site Compromise to Full Root Access – Bad Server Management – Part III
When an attacker manages to compromise and get access to a website, they won’t stop there. They will aim to gain full root (admin) access…
Malware Hidden Inside JPG EXIF Headers
A few days ago, Peter Gramantik from our research team found a very interesting backdoor on a compromised site. This backdoor didn’t rely on the…
SSH Brute Force – The 10 Year Old Attack That Still Persists
Three years later we are still seeing SSH brute force attacks compromising sites on a frequent basis. One of the first server-level compromises I had…
Fake piwik domain – piwik-stat
Piwik is an open source web analytics software that is used by many web masters. Andthe bad guys are using their popularity to try to…