WordPress Auto-Login Backdoor Disguised as JavaScript Data File
Puja Srivastava During a recent investigation, we discovered a sophisticated WordPress backdoor hidden in what appears to be a JavaScript data file. This malware automatically logs attackers…
Browsing Tag
Malware Cleanup
74 posts
Unauthorized Admin User Created via Disguised WordPress Plugin
Recently at Sucuri, we investigated a malware case reported by one of our clients. Their WordPress site was compromised, and the attacker had installed a…
7 Steps to Remove Malware from WordPress
Kyle Knight If you’ve ever had your website compromised by malware, you know the sheer panic it can cause. But don’t worry, you’re not alone. More importantly…
Web Shells: Types, Mitigation & Removal
Cesar Anjos Web shells are malicious scripts that give attackers persistent access to compromised web servers, enabling them to execute commands and control the server remotely. These…
How to Fix Google Ads Disapproved Due to Malicious or Unwanted Software
Rianna MacLeod Were your Google Ads just disapproved after a website compromise? Or, are you seeing policy violations for malicious or unwanted software in your Google Ads…
Hacked Website Threat Report – 2022
Education is crucial in defending your website against emerging threats. That’s why we are thrilled to share our 2022 Website Threat Research Report. Disseminating this…
Attackers Abuse Cron Jobs to Reinfect Websites
Ben Martin Malicious cron jobs are nothing new; we’ve seen attackers use them quite frequently to reinfect websites. However, in recent months we’ve noticed a distinctive new…
How to Fix the “This Site May Harm Your Computer” Warning
Most modern web browsers and search authorities like Google have a vested interest in protecting their users from malware. Warning messages like “This site may…
How to Find & Clean Up the AnonymousFox Hack
The AnonymousFox hack targets insecure websites and actively exploits them to spread phishing, spam, and other malware. A major nuisance for website owners, it also…
Manually Identifying an X-Cart Credit Card Skimmer
Liam Smith During a recent investigation, a new client came to us reporting that their antivirus had detected a suspicious domain loading on their website’s checkout page.…
Examining Unique Magento Backdoors
During a recent investigation into a compromised Magento ecommerce environment, we discovered the presence of five different backdoors that would provide attackers with code execution…