Outdated Duplicator Plugin RCE Abused
Peter Gramantik We’re seeing an increase in the number of cases where attackers are disabling WordPress sites by removing or rewriting its wp-config.php file. These cases are all linked…
Unsuccessfully Defaced Websites
Luke Leal Defaced websites are a type of hack that is easy to notice and a pain for website owners. Recently, we came across some defacement pages…
New Guide on How to Use the Sucuri WordPress Security Plugin
Juliana Lewis Sucuri has always been active in the WordPress community. We’ve attended WordCamps around the world, created tools and features specifically for WordPress, and have maintained…
“Google Fonts” popup leads to malware
A recent malware injection in a client\’s WordPress file was found to be targeting website visitors that were using the Google Chrome browser to access…
PCI for SMB: Requirement 5 & 6 – Maintain a Vulnerability Management Program
Victor Santoyo Update: Read our new PCI Compliance guide. This is the fourth post in a series of articles on understanding the Payment Card Industry Data Security…
WordPress Database Upgrade Phishing Campaign
Denis Sinegubko We have recently been notified of phishing emails that target WordPress users. The content informs site owners that their database requires an update and looks…
How to Improve Your Website Security Posture – Part II
AJ Syed Ali In the first post of this series, we discussed some of the main website security threats. Knowing the website security environment is a vital part…
Core Integrity Verifications
Gerson Ruiz In order to clean a malware infection, the first thing we need to know is which files have been compromised. At Sucuri, we use several…
Fake Font Dropper
Moe O Every day we see different website infections. When we receive unusual or interesting cases, our researcher instincts are triggered to investigate the unusual website behavior…
Massive WordPress Redirect Campaign Targets Vulnerable tagDiv Themes and Ultimate Member Plugins
This August, we’ve seen a new massive wave of WordPress infections that redirect visitors to unwanted sites. When redirected, users see annoying pages with random…
Fake Plugins with Popuplink.js Redirect to Scam Sites
Since July, we’ve been observing a massive WordPress infection that is responsible for unwanted redirects to scam and ad sites. This infection involves the tiny.cc…