PCI for SMB: Requirement 3 & 4 – Secure Cardholder Data
Victor Santoyo Update: Read our new PCI Compliance guide. This is the third post in a series of articles on understanding the Payment Card Industry Data Security…
Analysis of a Malicious Blackhat SEO Script
Krasimir Konov An enormous number of SEO spam infections are handled by us here at Sucuri. In our most recent hacked website trend report, we analyzed over…
Steps to Keep Your Site Clean: Updates
Celise Davison This is the second post of a series about Steps to Keep Your Site Clean. In the first post, we talked about Access Points; here we…
From Baidu to Google’s Open Redirects
Denis Sinegubko Last week, we described how an ongoing massive malware campaign began using Baidu search result links to redirect people to various ad and scam pages.…
Malicious Activities with Google Tag Manager
Cesar Anjos If I were to ask if you could trust a script from Google that is loading on your website, the majority of users would say…
Content Security Policy
Gerson Ruiz As a website owner, it’s a good idea to be aware of the security issues that might affect your site. For example, Cross-site Scripting (XSS)…
Unwanted Ads via Baidu Links
The malware attack that began as an installation of malicious Injectbody/Injectscr WordPress plugins back in February has evolved since then. Some of the changes were…
Hacked Website Trend Report – 2017
Rianna MacLeod We are proud to be releasing our latest Hacked Website Trend Report for 2017. This report is based on data collected and analyzed by the…
Obfuscation Through Legitimate Appearances
Peter Gramantik Recently, I analyzed a malware sample provided by our analyst Edward C. Woelke and noticed that it had been placed in a core WordPress folder.…
What is Virtual Hardening?
Juliana Lewis If you want to make your website security more robust, you need to think about hardening. To harden your website means to add different layers…
GitHub Hosts Infostealers Part 2: Cryptominers and Credit Card Stealers
Update – March 28th, 2018: The fake Flash update files referenced in this post have been moved from GitHub to port.so[.]tl, and the bit.wo[.]tc script…