2012 Web Malware Trends Report Summary
Daniel Cid Sucuri is a website security company focused on the detection and remediation of web malware. In 2012, via our SiteCheck scanner, we scanned 9,953,729 unique…
Payday Loan Spam affecting Thousands of Sites
One of the most important metrics used by search engines to rank a site is the number of link backs that it has. The more…
Drupal Core Vulnerability Released – Denial of Service – Advisory SA-CORE-2013-002
Tony Perez As if the week wasn’t exciting enough, Drupal has released a core vulnerability that leaves it susceptible to Denial of Service attacks. Metadata for this…
Linux Based SSHD Rootkit Floating The Interwebs
For the past couple of days we have been a lot of discussion on a number of forums about a potential kernel rootkit making its…
cPanel Inc. Server Compromised
It’s unclear on the specifics, but it appears the following letter is going out to cPanel users that have submitted a ticket in the last…
Website Malware – Fixing Joomla SPAM Hacks – Conditional Payloads
Our Senior Malware Engineer, Fioravante Cavallari, is at it again. I think he has made it his personal mission in life to expel all Joomla…
NBC Website HACKED – Be Careful Surfing
Breaking, the NBC site is currently compromised and blacklisted by Google. Anyone that visits the site (which includes any sub page) will have malicious iframes…
Sneaky Joomla Web Malware – JavaScript Infections
So the past week has been interesting, we have been having fun with a few JavaScript infections that really forced us to put on our…
Large Scale Compromises Leading to Traffic Distribution System
For the last few weeks we’ve been tracking a large scale decentralized Traffic Distribution System (TDS). It’s using hundreds of compromised sites as their first…
WordPress Plugin: Easy Digital Downloads – Security Flaw Discovered and Patchedd
Dre Armeda Last night we were contacted by Adam Pickering about a security flaw discovered in Easy Digital Downloads (EDD), a free WordPress eCommerce plugin that allows…
Large scale TDS redirections
Lots of compromised sites redirecting to TDS: http://1151.website.snafu.de/hkkj.html?h=1475928 http://adaptpro.co.uk/mwhi.html?h=1380448 http://aennekens.de/hozs.html?h=1180315 http://afamontserrat.org/zapn.html?h=877095 http://afhwarranty.us/wmcs.html?h=1235327 http://aklmn.com/mzos.html?h=1216229 http://alghuraba.co.uk/owes.html?h=1364764 http://app.2need.net/hwed.html?h=617164 http://appprices.com/heos.html?h=1168480 http://arlington9to5.com/mccf.html?h=423540 http://ashneh.in/zopn.html?h=841597 http://babylonproduction.com/wmcf.html?h=557620 http://badmintonscreensaver.com/ehai.html?h=1333181 http://bcitec.com/amms.html?h=1232317 http://belve.fr/wzai.html?h=1244948 http://belve.fr/wzpn.html?h=847683 http://bestofbec.com/hkgb.html?h=1507945 http://bestofbec.com/hmgn.html?h=809281…