Website Hosting: Security Awareness Can Reduce Costs
Dre Armeda Website hosting security has matured in recent years. Naturally, the types of security issues have changed because of it. For example, cross-contamination over multiple shared hosting…
Fake Plugins, Fake Security
Peter Gramantik Update: The plugin name is fake and has nothing to do with the well-known WP-SpamShield plugin in the official WordPress plugin repository. WordPress users are…
Stored Cross-Site Scripting Vulnerability in WordPress 4.8.1
Rodolfo Assis Update 11/03/2017: Read all about vulnerabilities and best practices to secure your website in our newly WordPress Security Guide today! During regular research audits for…
Simple self updating hacktool
Pedro Peixoto While working on a compromised website, it’s very common to encounter hacktools. Those are like the attackers’ swiss knife, allowing them to perform several tasks…
Hacked Websites Mine Cryptocurrencies
Denis Sinegubko Cryptocurrencies are all the rage now. Bitcoin, altcoins, blockchain, ICO, mining farms, skyrocketing exchange rates – you see or hear this every day in the…
Ecommerce Security: Fake Jquery Used as CC Scraper
Bruno Zanelato In the last few months, we noticed an increase in attacks targeting ecommerce platforms aiming to steal credit card information. We saw a similar rise…
Soccer spam. Really?
Fernando Barbosa In the last few months, we’ve covered several cases of SEO Spam in our labs and blog that were promoting products and services ranging from…
Using a VeraCrypt File Container to Encrypt Local Website Files
Caleb Lane If you are doing website development and have a local repository, or store website backups on your computer, you should strongly consider encrypting these sensitive…
Mayhem malware still on the wild
Jose Martinez Years ago, colleagues from Yandex introduced the concept of Mayhem infections. In that post, they provided very detailed information about the malware, its functionalities and…
Malicious Backdoors: Fake Images and Strrev Functions
Samuel Odendaal When a website is compromised, attackers frequently leave behind a backdoor – according to our research around 70% of all website hacks include a backdoor.…
Old Themes, Abandoned Scripts and Pitfalls of Cleaning Serialized Data
Over the summer, we’ve seen waves of WordPress database infections that use vulnerabilities in tagDiv’s Newspaper/Newsmag themes or InterconnectIT Search and Replace scripts (searchreplacedb2.php). The…