The Importance of Website Backups
Juliana Lewis Imagine waking up in the morning to see that a couple of calls were missed and your email is overloaded with messages saying that your…
Fake Font Dropper
Moe O A website owner reached out to us to investigate a weird behavior on their site. It was randomly showing a popup window for a missing…
How to Improve Website Resilience for DDoS Attacks – Part I
Northon Torga Denial of Service (Dos) and Distributed Denial of Service (DDoS) attacks are unforgiving. They test the limits of your web server and application resources by sending…
Magento CC Stealer Reinfector
Cesar Anjos We have seen many times in the past few months how attackers are infecting Magento installations to scrape confidential information such as credit cards, logins,…
How APIs Can Streamline Your Operations
Victor Santoyo Day-to-day operations can present many challenges. Whether you’re wearing multiple hats within the same department or a project lead managing dozens, even hundreds of web…
JQuory: Cryptomining in Nulled Themes and Plugins.
Denis Sinegubko Three months ago b>@ninoseki</b revealed a group of sites with cryptomining scripts inside jquory.js files (yes, jquory instead of jquery). Coinhive(“I2OG8vGGXjF7wMQgL37BhqG5aVPjcoQL”) is trigged by “jquory.js”.…
Shell Logins as a Magento Reinfection Vector
Recently, we have come across a number of websites that were facing reinfection of a credit card information stealer malware within the following files: app/Mage.php;…
New Guide on How to Position Website Security for Customers
Website security is challenging, especially when dealing with a large network of sites. That is why we have created a guide for web professionals and…
Cookie consent script used to distribute malware
Krasimir Konov Since the new website cookie usage regulations in the EU have come into place, many websites have added a warning on their website about how…
Sucuri is Committed to the Protection of Your Data
Rianna MacLeod Protecting our users’ information and privacy is extremely important to us. As a cloud-based security service, we’re fully committed to complying with the requirements of…
An Old Trick with a New Twist: Cryptomining Through Disguised URL Shorteners
Luke Leal As we have previously discussed on this blog, surreptitious cryptomining continues to be a problem as new methods emerge to both evade and hasten the…