Fake jQuery and Google Analytics Hide Yet Another Cryptominer
Denis Sinegubko This is a quick posts about yet another quite massive attack that installs CoinHive JavaScript Monero miners on compromised websites. You might have already read…
Risks For E-commerce Site Owners Through the Holidays
Pilar Garcia Shopping season is here, and with that, so is the opportunity for ecommerce site owners to grow their revenue and reputation. However, hackers are also…
How to Avoid Malicious Cyber Monday Campaigns
Ahmad Azizan Idris As consumers prepare to take advantage of the discounts and promotions for the Black Friday and Cyber Monday ecommerce holidays, bad actors are crafting fraudulent…
SQL Injection in bbPress
Marc-Alexandre Montpas During regular audits of our Sucuri Firewall (WAF), one of our researchers at the time, Slavco Mihajloski, discovered an SQL Injection vulnerability affecting bbPress. If…
New wave of wp-vcd Malware
Krasimir Konov Recently we saw a new wave of a known malware that injects malicious WordPress admin users to vulnerable or compromised sites.The malware, well analysed by…
Why Attackers Hack Small Sites
You would never leave the front door to your house wide open when you’re not home would you? Doing so would allow criminals to seize…
New WordPress Security Guide
Rianna MacLeod WordPress has become the most popular CMS and now powers over 28% of the web. With over 60 million downloads, its popularity makes it a…
Cryptominers on Hacked Sites – Part 2
Last month we wrote about how the emergence of website cryptocurrency miners resulted in hackers abusing the technology by injecting the CoinHive miners into compromised…
Attackers leveraging WP Maintenance plugin to deface websites
Bruno Zanelato Recently, during a website investigation, we detected that attackers have been modifying the database structure of WP Maintenance plugin (which is a very popular wordpress…
Malware Serving SEO Spam from External Sites
We handle an enormous number of SEO spam infections here at Sucuri. In Q3 of 2016, approximately 37% of all website infection cases were related…
Books SEO Spam
Fernando Barbosa We already discussed in our blog some cases where the attacker uploaded a full ready-to-use website in order to promote their products and services. This…