Website Security News

RawGit CDN is Abused by CryptoLoot Cryptominers

Denis Sinegubko
July 31, 2018

Recently, we came across another way to use files from GitHub repositories in malware infections. This time the infections weren’t via GitHub.io, raw.githubusercontent.com, or github.com/<user>/<repository>/raw/…

Read the Post

Switching to HTTPS Before It’s Too Late

Krasimir Konov
July 26, 2018

Google, Mozilla, and other web authorities are pushing for website owners to adopt HTTPS. Soon, Google Chrome will start flagging sites by displaying a warning that…

Read the Post

How Some OTP Systems Can Be Used to Prank Spam

Luke Leal
July 25, 2018

I recently came across an interesting index.php file and its corresponding directory on a compromised website. I loaded it in a testing environment and immediately…

Read the Post

Website Security

Browser Extension Bug Leads to Post Injection

Cesar Anjos
July 24, 2018

A few years ago, we saw how a browser extension introduced a threat to serve unwanted ads. Today, the number of browser extensions available to…

Read the Post

Hardening WordPress on Apache, Nginx, or IIS

Alycia Mitchell
July 23, 2018

Server configuration files allow administrators to restrict access and make changes at the server level. Depending on the server software you use, there are different…

Read the Post

Website Security

Hiding Malware Inside Images on GoogleUserContent

Denis Sinegubko
July 18, 2018

If you have been following our blog for a long time, you might remember us writing about malware that used EXIF data to hide its…

Read the Post

Using Innocent roles to hide admin users

Cesar Anjos
July 18, 2018

All across the internet we find guides and tutorials on how to keep your WordPress site secure, and they all approach the concept of user…

Read the Post

Persistent Malicious Redirect Variants

Peter Gramantik
July 16, 2018

It’s always nice to meet an old friend or someone you used to know well. You have news to share and talk about, stories to…

Read the Post

Ask Sucuri: How Do You Find Website Backdoors?

Juliana Lewis
July 11, 2018

In a previous post, we have explained what website backdoors are and what they look like. Today, we want to focus on ways that we…

Read the Post

WordPress Update – 4.9.7 Security & Maintenance Release

Marc-Alexandre Montpas
July 5, 2018

The WordPress team has just released a critical security and maintenance update to resolve a number of bugs and security issues. Included in this release…

Read the Post

CoinImp Cryptominer and Fully Qualified Domain Names

Denis Sinegubko
July 5, 2018

We are all familiar with the conventional domain name notation, where different levels are concatenated with the full stop character (period). E.g. “www.example.com”, where “www”…

Read the Post