Various Shades of Malware – Abusing Your Resources
Tony Perez We often write about very clear cut cases of malware activity. The attacker is leveraging your traffic, redirecting it to other locations, or injecting things…
Malware Redirection with a Delay
Daniel Cid You visit a site and it looks good and clean. However, if you keep the page open, after maybe 20-30 seconds, you get redirected to…
Web Server Compromise – Debian Distro – Identify and Remove Corrupt Apache Modules
Came across another server compromise this week. Client was complaining that the following kept being injected into their JavaScript files: document.write("<style.vb4brk { position:absolute; left:-1655px; top:-1476px} </style> <div…
Server Compromises – Attackers Covering Their Tracks
When you’re remediating servers, one of the things you’re always looking for are any traces that show the attacker is trying to cover their tracks.…
Dre Armeda Presenting on WordPress Security at WordCamp Phoenix 2013
Dre Armeda Here is the video for the WordPress Security presentation at WordCamp Phoenix 2013: Here is the slide deck from the presentation: Leave us your comments…
Twitter Suffers Compromise – Enterprise Attacks Continue
Looks like Twitter is the latest to get bit in the butt. They just put out the following on their blog: This week, we detected…
Web Server Attacks – Apache Modules, Log Management and RELM
New year, same tricks, mostly because they work. That’s how we’re kicking off the new year folks. In September of 2012, Dennis, of Unmask Parasites,…
WordPress Security: 5 Steps To Reduce Your Risk
Update 11/3/2017: Check out our latest WordPress Security Guide for best practices to keep your website protected and learn about vulnerabilities. Often you hear the…
WordPress 3.5.1 Released
The WordPress team just pushed out a new version of WordPress (3.5.1) that has some security bugs fixed. Straight from their release post, these are…
Server Compromises – Understanding Apache Module iFrame Injections and Secure Shell Backdoor
There are many ways to inject a malicious payload onto a website. The attacker can modify any of the web files (index.php for example), the…
Website Security – The Importance of Access
I’m not sure why more emphasis isn’t put on access in website security discussions, but I’ll spend some time on it today. Understand that this…