Backup, backup and backup
David Dede We just heard of a sad story about an Australian web hosting company (Distribute.IT) that was hacked and all of the sites they hosted were…
Google blacklisted all the .cz.cc domains
It seems that Google just blacklisted all the sites under the .cz.cc main domain (including the nic.cz.cc, start.cz.cc and all others). In their status page…
Blackhat SPAM SEO From Joomlapoject.net – Targeting Joomla
We are tracking another Blackhat SEO SPAM network being managed by http://joomlapoject.net. By the name of the domain, you can guess that they are targeting…
Information Leakage on multiple WordPress themes by WooThemes
This weekend there was a post on the Full disclosure list about multiple vulnerabilities on some WordPress themes by WooThemes. This is what the message…
Sony Music Brazil hacked (yet another sony defacement)
I hate to pick on Sony, but they got hacked again (and no, I am not talking about the Lulzsec + sonypictures, this is another…
Links Injection on WordPress – Blackhat SEO Spam (basicpills) update
For the last few months we’ve been tracking a very large blackhat SEO spam campaign initiated by basicpills.com, and many other pharma-related domains (mostly located…
VBulleting SQL injection vulnerability – Update now
A serious SQL injection vulnerability was reported on Vbulletin (4.0.x, 4.1.0, 4.1.1 and 4.1.2) last month and we are starting to see it being used…
Understanding .htaccess attacks – Part 1
Attackers have been using the .htaccess file for a while. They use this file to hide malware, to redirect search engines to their own sites…
WordPress 3.1.3 available (security fixes)
If you are using WordPress, make sure to upgrade it now. The version 3.1.3 was just released with a few security fixes: * Various security…
LizaMoon SQL injections (ur.php) – Now vcvsta.com, asweds.com, etc.
A couple of months ago the Lizamoon malware / Mass SQL injection was getting a lot of news coverage that it could be affecting hundreds…
osCommerce malware: Cannot redeclare corelibrarieshandler
We have been posting for a while about attacks targeting and infecting thousands of osCommerce sites (CreateCSS, div_colors, etc) and the importance of keeping it…