Desperate scammers
Luke Leal In an ideal scenario, when a scam website is found by a blacklist authority, it’s flagged as malicious and eventually taken down by the domain…
Data URLs and HTML Entities in New WordPress Malware
Denis Sinegubko Last week, an ongoing WordPress malware campaign started a new wave which included a variety of experimental injection types. Scripts as Data URLs The first…
Fake French Police Sextortion Scam
There has been a noted increase in the number of sextortion scams during 2019. These scam campaigns are commonly distributed through email, but any method…
Throwback Threat Thursday: JCE Vulnerability
Throwback Threat Thursday is a series of posts where we recall older vulnerabilities that have since been patched by their developers. In the past, these…
NIST Cybersecurity Framework
Juliana Lewis The United States National Institute of Standards and Technology (NIST) has created a framework for improving critical infrastructure cybersecurity, referred to as the NIST Cybersecurity…
Personal Online Privacy – Connecting Online
Victor Santoyo When California passed an online privacy law that will take effect on Jan. 1, 2020, it made me think about a user’s responsibility when it…
Fake UpdraftPlus Plugins
We often find various fake WordPress plugins installed by hackers during website cleanups. Recently, we’ve noticed a new wave of infections that install fake plugins…
Sucuri_encrypted: Magento Malware
In an effort to make malicious code appear to be credible, hackers commonly piggyback on the names of reputable, well-known companies and services. Typical examples…
Cryptominers & Backdoors Found in Fake Plugins
Krasimir Konov When cleaning websites, we regularly find phishing pages, malicious code injected into files, and SEO spam. However, over the past couple of months we’ve also…
Top 10 Website Hardening Tips
Northon Torga Website hardening means adding layers of protection to reduce the risk of website attacks, a process known as “defense in depth.” Here are our top…
What Are Ethical Hackers?
Alycia Mitchell There’s an issue with how some people define the word “hacker.” For some, it’s a word synonymous with “cybercriminal,” but not in the infosec community.…