Remove Unused/Testing/Debug Software From Your Site
Dre Armeda We constantly see sites hacked due to vulnerabilities in various tools. In most cases, site owners don’t even realize they are there, or don’t even…
Evil backdoors – Part II
David Dede A few months ago we did a post about backdoors, explaining how they work and how to look for them. If you didn’t read it,…
Mass infections from jjghui.com/urchin.js (SQL injection)
We are seeing many sites compromised with malware from jjghui.com/urchin.js. Most of them are IIS/ASP sites and the infection method seems to be similar to…
Malware on /etc/mailquota
We are seeing an interesting trend lately. A site gets compromised and starts to distribute malware to its users. The webmaster (owner of the site)…
Malware Infections from rebotstat dot com
We are starting to share some of our research and view of web-based malware online: http://sucuri.net/global. The #1 infection we are seeing in the last…
MySQL.com Hacked (Javascript Malware)
It looks like the MySQL.com website is currently hacked and compromised with a JavaScript malware (and serving malware to anyone visiting it). Our scanner identified…
Mass compromise at inmotionhosting.com
Thousands of sites were defaced today at InMotion hosting. The defacement was made by “TiGER-M@TE” and all of the affected sites showed the following text:…
Mass Spam Infection From Wplinksforwork Dot Com (50k+ WordPress Sites Hacked)
Last year we spoke about the siteurlpath blackhat SEO attack that was infecting many WordPress sites with spam. But, how many? We had no clue…
Website Getting Redirected? It Might Have Something To Do With Moneygram-tracking Dot Com
Have you ever tried to visit your site and you got redirected to a different site? Maybe some external news page that had nothing to…
TimThumb.php backdoor
If your site got compromised lately with the TimThumb.php vulnerability, make sure to check that script to see if it was not modified to act…
ASK Sucuri: What About the Backdoors?
Daniel Cid If you have any question about malware, blacklisting, or security in general, send it to us: contact@sucuri.net and we will answer here. Question: What about…