Simple cleanup solution for the latest WordPress hack
David Dede Updated 20160914 This post is very specific to one type of infection, there are many different types of infections and symptoms, do not be discouraged…
New attack today against WordPress
Update 2: Simple clean up solution: https://blog.sucuri.net/2010/05/simple-cleanup-solution-for-latest.html Update 1: Note that we are not blaming WordPress here. I am assuming that if the problem was…
Continuing attacks at Network Solutions?
Last week we reported about an attack against Network Solutions that modified the “php.ini” file on hundreds of sites to append a malicious payload to…
New infections today at Network Solutions
Update: We just heard back from Network solutions and they explained the issue to us. It is also related to the US Treasury Department hack,…
Leaking private IP addresses via DNS
Ever wondered where Cisco store their logs? Or what is the IP address for the Facebook development box? Or how a certain big company organize…
Walmart community web site still hacked
Remember a few weeks ago when we reported that the official web site for the Walmart Community Action Network was hacked and hosting SEO spam?…
SunTrust phishing – case study
Last week we were called to fix a Joomla site that got blacklisted and had some malware on it. Nothing unusual as we do that…
A new place to hide web-based malware: php.ini + cgi-bin
We got a call this weekend from a desperate site owner that had just found out that his site was hacked and hosting malware. He…
Network Solutions update and some numbers
I am getting a lot of questions via email or via the comments on what to do if a site hosted at Network Solutions is…
Improper separation of hosting accounts is putting customers at risk
If you are hosting your site at Hostek.com, you are currently at a higher risk of being hacked. Why? Because they do not currently perform…
Network Solutions hacked again
Network Solutions is getting hacked again. Just today we were notified of more than 50 sites hacked with the following malware javascript:If we decode this…