Mayhem Malware Server Botnet Continues to Evolve
Jose Martinez Three years ago, researchers at Yandex discovered a complex server infection, dubbed Mayhem, that embeds itself deep within a system by compiling a shared object…
Credit Card Stealer Investigation Uncovers Malware Ring
Krasimir Konov During a recent investigation, I found a new piece of malicious code being used to steal credit card information from compromised Magento sites. What I…
Website Hosting: Security Awareness Can Reduce Costs
Dre Armeda Website hosting security has matured in recent years. Naturally, the types of security issues have changed because of it. For example, cross-contamination over multiple shared hosting…
Fake Plugins, Fake Security
Peter Gramantik Update: The plugin name is fake and has nothing to do with the well-known WP-SpamShield plugin in the official WordPress plugin repository. WordPress users are…
Stored Cross-Site Scripting Vulnerability in WordPress 4.8.1
Rodolfo Assis Update 11/03/2017: Read all about vulnerabilities and best practices to secure your website in our newly WordPress Security Guide today! During regular research audits for…
Simple self updating hacktool
Pedro Peixoto While working on a compromised website, it’s very common to encounter hacktools. Those are like the attackers’ swiss knife, allowing them to perform several tasks…
Hacked Websites Mine Cryptocurrencies
Denis Sinegubko Cryptocurrencies are all the rage now. Bitcoin, altcoins, blockchain, ICO, mining farms, skyrocketing exchange rates – you see or hear this every day in the…
Ecommerce Security: Fake Jquery Used as CC Scraper
Bruno Zanelato In the last few months, we noticed an increase in attacks targeting ecommerce platforms aiming to steal credit card information. We saw a similar rise…
Soccer spam. Really?
Fernando Barbosa In the last few months, we’ve covered several cases of SEO Spam in our labs and blog that were promoting products and services ranging from…
Using a VeraCrypt File Container to Encrypt Local Website Files
Caleb Lane If you are doing website development and have a local repository, or store website backups on your computer, you should strongly consider encrypting these sensitive…
Mayhem malware still on the wild
Years ago, colleagues from Yandex introduced the concept of Mayhem infections. In that post, they provided very detailed information about the malware, its functionalities and…