How to Improve Your Website Security Posture – Part I
AJ Syed Ali Have you ever wondered if your website security posture is adequate enough? The risk of having a website compromise is never going to be zero.…
How to Improve Website Resilience for DDoS Attacks – Part II – Caching
Northon Torga In the first post of this series, we talked about the practices that will optimize your site and increase your website’s resilience to DDoS attacks.…
Fake Cloudflare Injection
Fioravante Souza Seeing malicious campaigns using domain names that resemble big market players is not news anymore. This time I\’ll talk about the new redirects of cloudflare.pw.****…
Cookie Consent Script Used to Distribute Malware
Krasimir Konov Most websites today use cookies. Since May 25th, 2018, all websites that do business in the European Union (EU) had to make some changes to…
Cryptominers: Binary-Process-Cron Variants and Methods of Removal
Tyler Lancy This post provides a brief overview of how to manually remove server-side cryptominers and other types of Binary-Process-Cron malware from a server. Unlike browser-based JavaScript…
Obfuscated JavaScript Crypto Miner
Samuel Odendaal During an incident response investigation, we detected an interesting piece of heavily obfuscated JavaScript malware. Once decoded, Crypto Miners were ran on customers visiting the…
RawGit CDN is Abused by CryptoLoot Cryptominers
Denis Sinegubko Recently, we came across another way to use files from GitHub repositories in malware infections. This time the infections weren’t via GitHub.io, raw.githubusercontent.com, or github.com/<user>/<repository>/raw/…
Switching to HTTPS Before It’s Too Late
Google, Mozilla, and other web authorities are pushing for website owners to adopt HTTPS. Soon, Google Chrome will start flagging sites by displaying a warning that…
How Some OTP Systems Can Be Used to Prank Spam
Luke Leal I recently came across an interesting index.php file and its corresponding directory on a compromised website. I loaded it in a testing environment and immediately…
Browser Extension Bug Leads to Post Injection
Cesar Anjos A few years ago, we saw how a browser extension introduced a threat to serve unwanted ads. Today, the number of browser extensions available to…
Hardening WordPress on Apache, Nginx, or IIS
Alycia Mitchell Server configuration files allow administrators to restrict access and make changes at the server level. Depending on the server software you use, there are different…