ChangeIP (dynamic DNS) malware
Daniel Cid If you look at the top domains distributing malware for the last days (and months), whatdo you see in common? #numberofsitesinfected #type #malwaredomain 650 iframe…
Sucuri SiteCheck Malware Scanner Plugin for WordPress
Dre Armeda If you’re a WordPress user, love our free SiteCheck scanner, or already use our free SiteCheck Malware Scanner Plugin for WordPress, we have an update…
Sucuri Launches Rapid+ Monitoring
A common feature our clients have been asking us for a long time is the ability to monitor their sites more frequently. For some high…
PSA: December Zero Day’s Announced – MySQL, FreeSSH, Free FTPD
Tony Perez So it looks like we’re closing out the year in style in 2012. This weekend a number of new, very serious, zero-day vulnerabilities were released…
JavaScript Redirect Using Multiple Outdated Websites
This is a doozy. This case was really interesting to remediate as it consisted of multiple outdated websites in a shared environment. We’re talking known…
Website Malware – Joomla SEP Attack – Pharma Injection
This was a fun, yet painful case. In the past we have written a few different posts targeting search engine poisoning attacks (SEP) that like…
Piwik.org webserver hacked and backdoor added to Piwik
If you are using Piwik and you have downloaded/updated it recently, please double check your install to verify that it does not contain a backdoor.…
Website Malware Removal – FTP Tips & Tricks
Update 9/9/16: We released a new guide that provides better instructions on how to clean a hacked WordPress site using the Free WordPress security plugin.…
SFTP/FTP Password Exposure via sftp-config.json
Have you heard of the file sftp-config.json? You haven’t? Neither did we until a few weeks ago. It is used by some SFTP/FTP clients (Sublime…
Website Malware – SPAM Injections – HideMe – KickeMe
Every now and then you have to give thanks that attackers have a sense of humor. For the past few weeks, maybe months, who keeps…
More Fake jQuery sites – jqueryc.com
We keep seeing fake jQuery sites popping up and being used to distributemalware. One was jquerys.org, other was jquery-framework.com and the new oneis jqueryc.com (199.59.241.179).…