Malware Campaign from .rr.nu
David Dede No, they don’t quit, so get used to it! We are seeing quite a few websites being compromised with malware getting loaded from random domains…
Sucuri is Hiring: Junior Support Analyst
Tony Perez Our team is growing and we have an opening for a Junior Support Analyst (remote). If you have a passion for the web, security, and…
Vulnerability in the Absolute Privacy Plugin
We are seeing reports that a vulnerability in the Absolute Privacy WordPress plugin (link) is being used to hack and compromise sites with it installed.…
New WordPress ToolsPack Plugin
Daniel Cid We deal with many compromised sites daily and lately we are seeing something in common across many of the sites running WordPress. They have installed…
Sucuri SiteCheck – Web Malware Distribution – January 2012
As many know, we have been offering our free website malware scanner – Sucuri SiteCheck, since early in 2011. In our commitment to continue to…
Malware Redirecting To Enormousw1illa.com
We are seeing a large number of sites compromised with a conditional redirection to the domain http://enormousw1illa.com/ (194.28.114.102). On all the sites we analyzed, the…
DreamHost Security Issue Prompts FTP Password Resets
Dre Armeda Yesterday on the DreamHost Status Blog, it was announced that all shell/FTP passwords would be reset due to what looks to be a security breach…
Funny Spammers: Any Reproduction of This Document in Part or in Whole is Strictly Prohibited
Spam is nothing new, but a recent site we were reviewing was a bit different. After a bit of analysis, we found a file called…
Better Engagement and Giving Back
Hi folks, we’re really excited about 2012, specifically because of our goal to give back more. This is in line with our core theme, to help…
Ask Sucuri: Why Do I Only Get Malware Warnings on Certain Browsers?
A few days ago, our scanner alerted that a site had malware related to the Blackhole Exploit Kit. The owner of the site said that…
WordPress 3.3 XSS Vulnerability Patched (3.3.1 Released)
We just learned of a reflected XSS vulnerability in WordPress 3.3 via the comments form (wp-comments.php). It is explained in detail here. The disclosed vulnerability…