Malware Archives

Credit Card Skimmer and Backdoor on WordPress E-commerce Site

Puja Srivastava
March 14, 2025

The battle against e-commerce malware continues to intensify, with attackers deploying increasingly sophisticated tactics. In a recent case at Sucuri, a customer reported suspicious files…

Read the Post

Cascading Redirects: Unmasking a Multi-Site JavaScript Malware Campaign

Puja Srivastava
March 6, 2025

During a recent website security investigation, we uncovered a malicious JavaScript injection affecting a WordPress website. The infection was responsible for redirecting visitors to unwanted…

Read the Post

Fake WordPress Plugin Impacts SEO by Injecting Casino Spam

Kayleigh Martin
February 26, 2025

Injecting malware via a fake WordPress plugin has been a common tactic of attackers for some time. This clever method is often used to bypass…

Read the Post

WordPress ClickFix Malware Causes Google Warnings and Infected Computers

Ben Martin
February 21, 2025

Since December of last year there has been a new fake Google reCAPTCHA campaign making its way through the WordPress world. Very similar to malware…

Read the Post

When Spam Hides In Plain Sight

Matt Morrow
February 19, 2025

We recently worked on an interesting case where Casino spam was visible in the page source, but couldn’t be located in any of the usual…

Read the Post

Hidden Backdoors Uncovered in WordPress Malware Investigation

Puja Srivastava
February 14, 2025

At Sucuri, we often encounter cases where malware is deeply embedded in websites, hidden in files and scripts that can easily escape detection. In this…

Read the Post

Malware Redirects WordPress Traffic to Harmful Sites

Puja Srivastava
January 23, 2025

Recently, a customer approached us after noticing their website was redirecting visitors to a suspicious URL. They suspected their site had been compromised and sought…

Read the Post

Stealthy Credit Card Skimmer Targets WordPress Checkout Pages via Database Injection

Puja Srivastava
January 9, 2025

Recently, we released an article where a credit card skimmer was targeting checkout pages on a Magento site. Now we’ve come across sophisticated credit card…

Read the Post

Malicious Script Injection on WordPress Sites

Puja Srivastava
December 5, 2024

Recently, our team discovered a JavaScript-based malware affecting WordPress sites, primarily targeting those using the Hello Elementor theme. This type of malware is commonly embedded…

Read the Post

Credit Card Skimmer Malware Targeting Magento Checkout Pages

Puja Srivastava
November 26, 2024

Magento websites are a frequent target for cybercriminals due to their widespread usage in eCommerce and the valuable customer data they handle. During a routine…

Read the Post

Simple Include Statement Hides Casino Spam

Kayleigh Martin
November 14, 2024

Just as there are countless types of websites on the internet, there are just as many attackers seeking to exploit them. These attackers develop malicious…

Read the Post