Malware Archives

Malvertising Campaign Hides in Plain Sight on WordPress Websites

Puja Srivastava
October 3, 2025

Recently, one of our customers noticed suspicious JavaScript loading across their WordPress website. Visitors were being served third-party scripts that the site owner never installed.…

Read the Post

Hidden WordPress Backdoors Creating Admin Accounts

Puja Srivastava
September 23, 2025

During a recent cleanup of a compromised WordPress website, we discovered two different malicious files designed to silently manipulate administrator accounts. Attackers often inject such…

Read the Post

Malicious JavaScript Injects Fullscreen Iframe On a WordPress Website

Puja Srivastava
August 13, 2025

Last month, we came across an ongoing JavaScript-based malware campaign affecting compromised websites. The malware injects a fullscreen iframe that silently loads content from a…

Read the Post

Unauthorized Admin User Created via Disguised WordPress Plugin

Puja Srivastava
July 29, 2025

Recently at Sucuri, we investigated a malware case reported by one of our clients. Their WordPress site was compromised, and the attacker had installed a…

Read the Post

Uncovering a Stealthy WordPress Backdoor in mu-plugins

Puja Srivastava
July 22, 2025

Recently, our team uncovered a particularly sneaky piece of malware tucked away in a place many WordPress users don’t even know exists: the mu-plugins folder.…

Read the Post

WordPress Redirect Malware Hidden in Google Tag Manager Code

Puja Srivastava
July 17, 2025

Last month, a customer contacted us after noticing their WordPress website was unexpectedly redirecting to a spam domain. The redirection occurred approximately 4-5 seconds after…

Read the Post

Stealthy PHP Malware Uses ZIP Archive to Redirect WordPress Visitors

Puja Srivastava
July 11, 2025

Last month, a customer contacted us, concerned about persistent and inexplicable redirects on their WordPress website. Our investigation quickly unearthed a sophisticated piece of malware…

Read the Post

Attackers Inject Code into WordPress Theme to Redirect Visitors

Matt Morrow
July 9, 2025

In a recent article we discussed some of the reasons sites are frequently attacked. That article covered browser redirects, and we’ll explore an example of…

Read the Post

The Case of Hidden Spam Pages

Ben Martin
June 25, 2025

Spammy posts and pages being placed on WordPress websites is one of the most common infections that we come across. The reason being is that…

Read the Post

Malicious WordPress Plugin Creates Hidden Admin User Backdoor

Matt Morrow
June 20, 2025

I recently wrote about a case where a malicious plugin was used to steal admin credentials. Here we will examine yet another malicious plugin that…

Read the Post

Analysis of a Malicious WordPress Plugin: The Covert Redirector

Puja Srivastava
June 18, 2025

A few weeks ago, we received a support request from a website owner who was experiencing unexpected redirects. Visitors landed on the website normally, but…

Read the Post