Malware Cleanup

The Hidden PHP Malware that Reinfects Cleaned Files

The Hidden PHP Malware that Reinfects Cleaned Files

| | Black Hat Tactics, Hacked Websites, Malware, Malware Cleanup, Sucuri Labs, Website Backdoor, Website Malware Infections, Website Security
Website reinfections are a serious problem for website owners, and it can often be difficult to determine the cause behind the reinfection — especially if you lack access to necessary logs, which ...
Sucuri Blog
Critical Vulnerability in File Manager Plugin Affecting 700k WordPress Websites

Critical Vulnerability in File Manager Plugin Affecting 700k WordPress Websites

| | Malware Cleanup, Secure Development, Vulnerability Disclosure, WordPress Plugins and Themes, wordpress security
Yesterday, the WordPress plugin File Manager was updated, fixing a critical vulnerability allowing any website visitor to gain complete access to the website. Users of our WAF were never vulnerable to this ...
Sucuri Blog
PinnacleCart Server-Side Skimmers and Backdoors

PinnacleCart Server-Side Skimmers and Backdoors

| | Black Hat Tactics, Ecommerce Security, Hacked Websites, Malware Cleanup, Server Security, Webserver Infections, Website Backdoor, Website Malware Infections
While open-source ecommerce platforms are the most common targets for web skimmers, hackers also target paid-for software — especially if it’s used on high-profile online stores with large user-bases. This time, our ...
Sucuri Blog
Hacked Website Threat Report – 2019

Hacked Website Threat Report – 2019

| | Black Hat Tactics, brute force, Conditional Malware, cryptominers, ddos, Drupal Security, Ecommerce Security, encryption, Hacked Websites, Joomla Security, Magento Security, Malware Cleanup, Obfuscation, Phishing, Security Education, SEO spam, sucuri, Sucuri Firewall, Website Backdoor, Website Malware Infections, Website Security, WordPress Plugins and Themes, wordpress security, XSS, zero-day
The threat landscape for website owners is constantly shifting on a regular basis — and it’s becoming increasingly more complex. As attackers continue to develop tools and find new vulnerabilities to massively ...
Sucuri Blog
Zen Cart “PayPal” Skimmer

Zen Cart “PayPal” Skimmer

| | Black Hat Tactics, Ecommerce Security, Hacked Websites, Malware Cleanup, Website Malware Infections, Website Security
While we mostly see skimmers on Magento based websites, this does not mean that less-popular ecommerce platforms are safe from infections with similar payment information stealing malware. We recently found a case ...
Sucuri Blog
Vulnerable Versions of Adminer as a Universal Infection Vector

Vulnerable Versions of Adminer as a Universal Infection Vector

| | Black Hat Tactics, Hacked Websites, Magento Security, Malware Cleanup, Redirects, Webserver Infections, Website Backdoor, Website Malware Infections, Website Security, WordPress Plugins and Themes, wordpress security
This past week, we’ve been monitoring a new wave of website infections mostly impacting WordPress and Magento websites. We found that hackers have been injecting scripts from scripts.trasnaltemyrecords[.]com into multiple files and ...
Sucuri Blog
Reset Email Account Passwords after Website Infection: Follow Up

Reset Email Account Passwords after Website Infection: Follow Up

| | Best Practices, Black Hat Tactics, Hacked Websites, Malware Cleanup, Website Backdoor, Website Malware Infections, Website Security
In a previous analysis of a malicious file, we demonstrated why you should always update your email account passwords after a security compromise. The information security threat landscape is always changing. Likewise, ...
Sucuri Blog
What is Cross-Site Contamination & How to Prevent It

How to Prevent Cross-Site Contamination for Beginners

| | Ask Sucuri, Best Practices, Hacked Websites, Malware Cleanup, Security Advisory, Security Education, Webserver Infections, Website Firewall, Website Hosting, Website Malware Infections, Website Security
What is Cross-Site Contamination? Cross-site contamination happens when a hacked site infects other sites on a shared server. Think of it as your kid in daycare catching the flu, next thing you ...
Sucuri Blog

Fear, Uncertainty, and Doubt

| | Best Practices, Hacked Websites, Malware Cleanup, Website Hosting, Website Security
There’s a term for the practice of scaring potential customers into purchasing products or services they don’t need: FUD; fear, uncertainty, and doubt. This practice is widespread in the computer/IT industries at ...
Sucuri Blog

Ask Sucuri: How Do You Find Website Backdoors?

| | Ask Sucuri, Black Hat Tactics, Hacked Websites, Malware Cleanup, Security Education, Website Backdoor, Website Malware Infections, Website Security
In a previous post, we have explained what website backdoors are and what they look like. Today, we want to focus on ways that we identify and remove backdoors to prevent reinfection ...
Sucuri Blog
Load more