Gmail blacklisted by Spamhaus
David Dede Update: Gmail not blacklisted anymore. It seems that today Spamhaus (a widely used Spam blacklist) started to blacklist the IP addresses used by gmail. We…
Pharma hack and their C&C (Command & control) server
A large portion of the sites Sucuri has been fixing in recent weeks are stemming from infections caused by the infamous Pharma Hack. We posted…
Yet another series of attacks (part X) – vancouvererrorsonfile.com and the hilarykneber group
If you have been following our blog long, you probably heard about quite a few large scale attacks affecting many hosting companies: GoDaddy, Bluehost, Dreamhost,…
Cleaning the “siteurlpath” hack on WordPress (wplinksforwork and hemoviestube spam bots)
Recently we started to see a lot of WordPress sites hacked with malware hidden inside the wp_options -> siteurlpath table. The symptoms are very similar…
UFC.com blacklisted by Google (indirectly)
Anyone trying to visit the site UFC.com (from Google Chrome or Firefox) will get a big scary warning from Google: Warning: Visiting this site may…
Vulnerability in Vbulletin 3.8.6
If you are running Vbulletin 3.8.6 (the latest 3.8.x version), make sure to remove the faq.php as soon as possible. A vulnerability has been found…
Yet another series of attacks – This time using whereisdudescars.com
Update 1: It seems that this attack is limited to only Bluehost and Dreamhost, not GoDaddy like in the previous times. Update 2: This script…
Fox News Website Hacked
Dre Armeda We reported yesterday evening that various sites in the Fox web network have been infected with the Pharma Hack. It doesn’t stop there. I just…
Various Fox Websites Hit With Pharma Hack
If you’ve been following Sucuri, you’ve seen a bunch of discussion around the steadily growing Pharma Hack. As we continue research on the issue we…
Understanding and Cleaning the Pharma Hack on WordPress
This post is very specific to one type of infection, there are many different types of infections and symptoms, do not be discouraged if the…
Nagios Community Site Hacked
We just detected (via our scanner) that the Nagios community site (community.nagios.org) has been hacked and is redirecting to a Viagra site. The results vary…