When Good Plugins Go Bad – SEO Spam on Joomla Websites
Daniel Cid We recently published an article about an interesting case where a very popular WordPress Plugin (Social Media Widget), with more than 900,000 downloads, got sold…
WordPress Plugin Social Media Widget Hiding Spam – Remove it now
Authored by Daniel Cid and Tony Perez. If you are using the Social Media Widget plugin (social-media-widget), make sure to remove it immediately from your…
WordPress Security Presentation by Tony Perez
Tony Perez Tomorrow I will be flying to my hometown (Miami) to give a Website Security presentation to a bunch of enthusiastic online professionals at an event…
UNICAMP – Used to Host Phishing Pages
Magno Rodrigues We just discovered that UNICAMP (Universidade Estadual de Campinas), a renowned Brazilian University, has had their infrastructure compromised and it is being used to host…
Comment SPAM Bad Neighborhood Analysis (2013-Mar)
We track and block a lot of comment SPAM via our WordPress plugin and our CloudProxy WAF. One thing we noticed is that the majority…
Virtual Hardening with Sucuri CloudProxy
If you read our blog you know that we are really open to providing insight into malware infections, remediation and hardening tips. The goal is…
Virtual Patching for Websites with Sucuri CloudProxy
All software has bugs, and some bugs can lead to security vulnerabilities. Vulnerabilities can be extremely dangerous when your software is running over the web,…
2012 Web Malware Trends Report Summary
Sucuri is a website security company focused on the detection and remediation of web malware. In 2012, via our SiteCheck scanner, we scanned 9,953,729 unique…
Payday Loan Spam affecting Thousands of Sites
One of the most important metrics used by search engines to rank a site is the number of link backs that it has. The more…
Drupal Core Vulnerability Released – Denial of Service – Advisory SA-CORE-2013-002
As if the week wasn’t exciting enough, Drupal has released a core vulnerability that leaves it susceptible to Denial of Service attacks. Metadata for this…
Linux Based SSHD Rootkit Floating The Interwebs
For the past couple of days we have been a lot of discussion on a number of forums about a potential kernel rootkit making its…