ESET Blacklist Results Added to SiteCheck
Daniel Cid If you did a SiteCheck scan today, you probably saw a new entry in the Blacklist tab for ESET. ESET has been a good friend…
New juquery.com injection
Fioravante Souza Today we found a malicious iframe that was being loaded from juquery.com (another fake jquery site). Itconsisted of the following code hidden inside one of…
vBulletin Infections from Adabeupdate
vBulletin is a popular forum platform that is also starting to become a popular target for web attacks. vBulletin (and vbSEO) had some serious security…
Malware Infection – Blocked by Day Limit
Estevao Avillez This week while working on a compromised site, I found an interesting variation of the Blackhole injection. We work with many sites injected with Blackhole,…
Google Transparency Report – Malware Distribution
Google just released their Malware Distribution Transparency Report, sharing the amount of sites compromised or distributing malware detected by their systems (Safe Browsing program). Google’s…
WordPress 3.5.2 Security and Maintenance Release
Dre Armeda The WordPress team just pushed out a new version of WordPress (3.5.2) that has some security bugs fixed. Straight from their release post, these are…
New Apache Module Injection
For the last few months we have been talking about the Darkleech Apache Module injection that is being used to insert malicious iframes into every…
Brazilian Protests Leading to Mass Defacements
Lately, Brazil is going through a series of political protests against the current administration and the large amount of over expenses related to the 2014…
Plesk Vulnerability – In the Wild for Months Before Disclosure
A few days ago we published a post about the Plesk 0-day vulnerability that we started to see being probed in the wild. It uses…
Apache PHP Injection to JavaScript Files
We have been talking about Apache server-side injections for a while. Ranging from malicious modules, like Darkleech, to modified Apache binaries. From an attacker perspective,…
vBulletin Conditional Malware – myFTP.biz Malicious iFrames
We have to be honest here, there’s no fun in cleaning up infected .htaccess files. It’s boring, but it happens a lot! But it’s not…