Spl_autoload Backdoor
Denis Sinegubko With backdoors, one of the main challenges for malware authors is to execute code without using obvious functions (such as eval, asset, create_function, etc.) that…
Top 10 Hacks & Attacks from 2019
Art Martori Last year was a busy one in the world of website security. Our 2019 Threat Research Report shows that over 60% of websites we cleaned…
Phishing with a COVID-19 Lure
Luke Leal It’s not uncommon to see criminals use disasters or current events to enhance their social engineering tactics, and the recent COVID-19 pandemic is no different.…
Analyzing & Decrypting L4NC34’s Simple Ransomware
Cesar Anjos We’re constantly seeing news about computers being infected by ransomware, but very little do we hear about it affecting websites. That being said, the impact…
Fake License.txt File Loaded Through PHP Include
Our team recently found a malicious injection located within a PHP include. The redirect occurs via the include function, which includes a file inconspicuously named…
Face Mask Spam Links Injected in WordPress Database
During a recent malware removal request, we found a compromised WordPress site being used to redirect to spam websites. The campaign was leveraging an increase…
How to Find & Fix the Japanese Keyword Hack
If you’re wondering how to find and fix the Japanese keyword hack, get started by identifying a real-life example. First, open Google Translate, and then…
Multi-Step Phishing Kit Targeting Credit Union
Phishing attacks can come in all shapes and sizes. Posing a serious threat to industries large and small, phishing campaigns are the fraudulent attempt to…
How to Protect Personally Identifiable Information (PII) from Search Engines
Krasimir Konov In today’s internet age we take our privacy for granted. We sign up for many services which are “free.” We participate in giveaways and generally…
Vulnerabilities Digest: March 2020
John Castro Fixed Plugins and Vulnerabilities Plugin Vulnerability Patched Version Installs Cookiebot Reflected Cross-Site Scripting 3.6.1 40000 Data Tables Generator By Supsystic Authenticated Stored XSS 1.9.92 30000…
VPN: A Key to Securing an Online Work Environment
Marc Kranat The current COVID-19 epidemic is changing the way people work, rapidly moving to working remotely as I have done for 20 years. I am providing…