Hackers Use Fake Google reCAPTCHA to Cloak Banking Malware
Luke Leal The most effective phishing and malware campaigns usually employ one of the following two age-old social engineering techniques: Impersonation These online phishing campaigns impersonate a…
The Importance of Website Logs
Krasimir Konov As a security company, we deal with a lot of compromised websites. Unfortunately, in most cases, we have limited access to customer logs, which is…
Add Security to Your Website Agency Portfolio
Eli Lopez As a website industry professional, you are aware of the importance of website security. This is especially true when managing 10 or more sites. How…
Googlebot or a DDoS Attack?
Northon Torga A bot is a software application that uses automation to run scripts on the internet. Also called crawlers or spiders, these guys take on the…
The Anatomy of Website Malware: An Introduction
Peter Gramantik We see a lot of files infected by website malware on a daily basis here at Sucuri Labs. What we don’t see is very many…
Safer Internet Day: Security vs. Convenience
Alycia Mitchell It isn’t easy to be secure all the time — this is especially true if you are new to cybersecurity. A well-formed security plan takes…
Fake Parameters Conceal a Backdoor
Denis Sinegubko We found this backdoor in the middle of the logrss.php file that defined the JDocumentRendererRSS class. …function jregisterClass() { // merge arrays $info = array_merge($_REQUEST,$_COOKIE); //…
How to Prevent Cross-Site Contamination for Beginners
Josh Hammer What is Cross-Site Contamination? Cross-site contamination happens when a hacked site infects other sites on a shared server. Think of it as your kid in…
Spam Injector Disguised as License Key in WordPress Website
Moe O Here at Sucuri, we clean WordPress websites every day. There are various types of common malware, but when we stumble upon a different scenario, our…
Optimize Setup to Improve Your Website Resilience for DDoS Attacks
Distributed denial-of-service (DDoS) attacks can disrupt website traffic and impact any business. To help website owners and webmasters improve their website resilience to DDoS attacks,…
Improvements to SiteCheck Website Scanner
Jonas Andrijauskas SiteCheck is Sucuri’s free website malware and security scanner offered to anyone who wants to scan their websites for malware and blacklist status. Last year,…