Hacked Website Trend Report – 2018
Rianna MacLeod We are proud to be releasing our latest Hacked Website Trend Report for 2018. This report is based on data collected and analyzed by the…
Fake Browser Updates Push Ransomware and Bank Malware
Denis Sinegubko Recently we came across a malicious campaign injecting scripts that push fake browser updates onto site visitors. This is what a typical fake update request…
Google Analytics and Angular in Magento Credit Card Stealing Scripts
Over the last few months, we’ve noticed several credit card-stealing scripts that use variations of the Google Analytics name to make them look less suspicious…
Hackers Use Fake Google reCAPTCHA to Cloak Banking Malware
Luke Leal The most effective phishing and malware campaigns usually employ one of the following two age-old social engineering techniques: Impersonation These online phishing campaigns impersonate a…
The Importance of Website Logs
Krasimir Konov As a security company, we deal with a lot of compromised websites. Unfortunately, in most cases, we have limited access to customer logs, which is…
Add Security to Your Website Agency Portfolio
Eli Lopez As a website industry professional, you are aware of the importance of website security. This is especially true when managing 10 or more sites. How…
Googlebot or a DDoS Attack?
Northon Torga A bot is a software application that uses automation to run scripts on the internet. Also called crawlers or spiders, these guys take on the…
The Anatomy of Website Malware: An Introduction
Peter Gramantik We see a lot of files infected by website malware on a daily basis here at Sucuri Labs. What we don’t see is very many…
Safer Internet Day: Security vs. Convenience
Alycia Mitchell It isn’t easy to be secure all the time — this is especially true if you are new to cybersecurity. A well-formed security plan takes…
Fake Parameters Conceal a Backdoor
We found this backdoor in the middle of the logrss.php file that defined the JDocumentRendererRSS class. …function jregisterClass() { // merge arrays $info = array_merge($_REQUEST,$_COOKIE); //…
How to Prevent Cross-Site Contamination for Beginners
Josh Hammer What is Cross-Site Contamination? Cross-site contamination happens when a hacked site infects other sites on a shared server. Think of it as your kid in…