Conditional Malware

Backdoor Shell Dropper Deploys CMS-Specific Malware

| | Black Hat Tactics, Conditional Malware, Drupal Security, Hacked Websites, Joomla Security, Magento Security, Sucuri Labs, Website Backdoor, Website Malware Infections, Website Security, wordpress security
A large majority of the malware we find on compromised websites are backdoors that allow an attacker to maintain unauthorized access to the site and execute whatever commands they want. Another common ...
Sucuri Blog

Fake WordPress Plugin SiteSpeed Serves Malicious Ads & Backdoors

| | Black Hat Tactics, Conditional Malware, Hacked Websites, malvertising, Website Security, WordPress Plugins and Themes, wordpress security
Fake WordPress plugins appear to be trending as an effective way of establishing a foothold on compromised websites. During a recent investigation, we discovered a fake component which was masquerading as a ...
Sucuri Blog
Phishing Campaign Targets Poste Italiane & SMS OTP Verification

Phishing Campaign Targets Poste Italiane & SMS OTP Verification

| | Black Hat Tactics, Conditional Malware, passwords, Phishing, Redirects, Security Education, Website Security
When creating phishing lures, attackers may cite recent major regulatory changes within the context of their social engineering scheme to confuse or further entice victims into clicking a link or performing some ...
Sucuri Blog

Obfuscated WordPress Malware Dropper

| | Black Hat Tactics, Conditional Malware, Hacked Websites, Obfuscation, Website Malware Infections, Website Security, wordpress security
It goes without saying that evasive maneuvering is at the top of a hacker’s priority list. Most often, they try to evade detection by obfuscating their malicious code to make it unreadable ...
Sucuri Blog
Assemble the Cookies

Assemble the Cookies

| | Black Hat Tactics, Conditional Malware, Hacked Websites, Security Education, Website Malware Infections, Website Security
When we investigate compromised websites, it’s not unusual to find malicious files that have been obfuscated through forms of encoding or encryption — however, these are not the only methods that attackers ...
Sucuri Blog
Abused Cloudflare Workers Service Used to Inject Korean SEO Spam

Abused Cloudflare Workers Service Used to Inject Korean SEO Spam

| | Best Practices, Black Hat Tactics, Conditional Malware, Hacked Websites, SEO spam, Website Malware Infections, Website Security
We were recently contacted by a website owner about some malicious injected spam links that were being indexed by Google’s search engine crawler Googlebot. What was especially frustrating for the website owner ...
Sucuri Blog
Hacked Website Threat Report – 2019

Hacked Website Threat Report – 2019

| | Black Hat Tactics, brute force, Conditional Malware, cryptominers, ddos, Drupal Security, Ecommerce Security, encryption, Hacked Websites, Joomla Security, Magento Security, Malware Cleanup, Obfuscation, Phishing, Security Education, SEO spam, sucuri, Sucuri Firewall, Website Backdoor, Website Malware Infections, Website Security, WordPress Plugins and Themes, wordpress security, XSS, zero-day
The threat landscape for website owners is constantly shifting on a regular basis — and it’s becoming increasingly more complex. As attackers continue to develop tools and find new vulnerabilities to massively ...
Sucuri Blog
Fake French Police Sextortion Scam

Fake French Police Sextortion Scam

| | Conditional Malware, cryptominers, Email Spam, Security Advisory, Website Malware Infections, Website Security
There has been a noted increase in the number of sextortion scams during 2019. These scam campaigns are commonly distributed through email, but any method of digital communication can be used to ...
Sucuri Blog
Hacked Website Trend Report – 2018

Hacked Website Trend Report – 2018

| | Best Practices, Black Hat Tactics, Conditional Malware, google, Hacked Websites, Industry Reports, Website Backdoor, Website Security
We are proud to be releasing our latest Hacked Website Trend Report for 2018. This report is based on data collected and analyzed by the GoDaddy Security / Sucuri team, which includes ...
Sucuri Blog
Fake Browser Updates Push Ransomware and Bank Malware

Fake Browser Updates Push Ransomware and Bank Malware

| | Black Hat Tactics, Conditional Malware, Hacked Websites, Javascript, Website Malware Infections, Website Ransomware, Website Security, wordpress security
Recently we came across a malicious campaign injecting scripts that push fake browser updates onto site visitors. This is what a typical fake update request looks like: Users see a message box ...
Sucuri Blog
Load more