Attacks Against Timthumb.php in the Wild – List of Themes and Plugins Being Scanned
David Dede We are seeing large scale attacks against the vulnerable timthumb.php script in the wild. Thousands of sites are getting compromised and if you have it…
WordPress sites with .htaccess hacked
The TimThumb.php vulnerability is causing a lot of WordPress sites to get compromised with the superpuperdomain.com and superpuperdomain2.com remote JavaScript injection. However, that’s not all…
TimThumb.php Vulnerability Not Only Affecting Themes – Plugins too
The Timthumb.php vulnerability is being used in the wild to hack and infect thousands of WordPress sites. Hopefully everyone is checking their themes and updating…
Non-Stop Attacks Against osCommerce – Time to Take Action
The malware attacks against osCommerce sites are still going at full force and the site owners have to take action to secure and update their…
Update to the Superpuperdomain2.com malware
Just a quick update to the Superpuperdomain2.com/Superpuperdomain.com malware infection that has been affecting thousands of WordPress sites with the vulnerable timthumb.php script. You can read…
WordPress Sites Hacked with Superpuperdomain2.com
A few days ago we posted about a series of attacks that were happening against WordPress sites running the vulnerable timthumb.php script. We detected thousands…
WordPress Sites Hacked with Superpuperdomain dot com (Attacking Timthumb.php)
We are seeing a large number of WordPress sites compromised with a malicious JavaScript loading from superpuperdomain.com/count.php. That JavaScript redirects visitors that were going to…
Attacks against osCommerce sites – Spam / google_analytics_obh
It seems that the attacks against osCommerce are not going to stop any time soon. With so many valuable targets (online stores) that are not…
Mass Compromise of Sites at gogvo.com – SEO Spam
A regular topic of discussion the past few months has been the basicpills link injection (a type of blackhat seo spam) on WordPress sites. If…
Timthumb Security Vulnerability – List of Themes
The Timthumb 0-day security vulnerability is generating a lot of noise and for good reason. If you have a theme that includes TimThumb, your site…
Timthumb.php Security Vulnerability – Just the Tip of the Iceberg
There has been some buzz about a zero day vulnerability found in Timthumb.php that can allow for arbitrary file uploads. Although this is a platform…