Virtual Hardening with Sucuri CloudProxy
Daniel Cid If you read our blog you know that we are really open to providing insight into malware infections, remediation and hardening tips. The goal is…
Virtual Patching for Websites with Sucuri CloudProxy
All software has bugs, and some bugs can lead to security vulnerabilities. Vulnerabilities can be extremely dangerous when your software is running over the web,…
2012 Web Malware Trends Report Summary
Sucuri is a website security company focused on the detection and remediation of web malware. In 2012, via our SiteCheck scanner, we scanned 9,953,729 unique…
Payday Loan Spam affecting Thousands of Sites
One of the most important metrics used by search engines to rank a site is the number of link backs that it has. The more…
Drupal Core Vulnerability Released – Denial of Service – Advisory SA-CORE-2013-002
Tony Perez As if the week wasn’t exciting enough, Drupal has released a core vulnerability that leaves it susceptible to Denial of Service attacks. Metadata for this…
Linux Based SSHD Rootkit Floating The Interwebs
For the past couple of days we have been a lot of discussion on a number of forums about a potential kernel rootkit making its…
cPanel Inc. Server Compromised
It’s unclear on the specifics, but it appears the following letter is going out to cPanel users that have submitted a ticket in the last…
Website Malware – Fixing Joomla SPAM Hacks – Conditional Payloads
Our Senior Malware Engineer, Fioravante Cavallari, is at it again. I think he has made it his personal mission in life to expel all Joomla…
NBC Website HACKED – Be Careful Surfing
Breaking, the NBC site is currently compromised and blacklisted by Google. Anyone that visits the site (which includes any sub page) will have malicious iframes…
Sneaky Joomla Web Malware – JavaScript Infections
So the past week has been interesting, we have been having fun with a few JavaScript infections that really forced us to put on our…
Large Scale Compromises Leading to Traffic Distribution System
For the last few weeks we’ve been tracking a large scale decentralized Traffic Distribution System (TDS). It’s using hundreds of compromised sites as their first…