Malware Updates

Vulnerabilities Digest: June 2020

| | Black Hat Tactics, Hacked Websites, Malware Updates, Redirects, Security Advisory, Security Education, SEO spam, Vulnerability Disclosure, Webserver Infections, WordPress Plugins and Themes, XSS
Highlights for June 2020 Cross site scripting is still the most common vulnerability in WordPress Plugins. Bad actors are taking advantage of the lack of restrictions in critical functions and issues surrounding ...
Sucuri Blog

Labs Notes Monthly Recap – May/2020

| | Hacked Websites, Malware Updates, Website Malware Infections, Website Security
In 2020, we doubled up our research efforts to report on many new attacks and hacks that we see in the wild. We believe that being informed is a big part of ...
Sucuri Blog

Labs Notes Monthly Recap – April/2020

| | Hacked Websites, Malware Updates, Website Malware Infections, Website Security
In 2020, we doubled up our research efforts to report on many new attacks and hacks that we see in the wild. We believe that being informed is a big part of ...
Sucuri Blog
Throwback Threat Thursday: WordPress 4.7 WP-JSON Content Injection Vulnerability

Throwback Threat Thursday: WordPress 4.7 WP-JSON Content Injection Vulnerability

| | Hacked Websites, Malware Updates, Website Malware Infections, Website Security, wordpress security
Throwback Threat Thursday is a series of posts where we recall older vulnerabilities that have since been patched by their developers. In the past, these vulnerabilities caused significant impacts to the security ...
Sucuri Blog
5 Year Anniversary of the SoakSoak Malware Tsunami

5 Year Anniversary of the SoakSoak Malware Tsunami

| | Hacked Websites, Malware Updates, Website Malware Infections, Website Security, WordPress Plugins and Themes, wordpress security
This is a story about the SoakSoak malware campaign that proved that you can’t underestimate impact of security issues in popular premium software. These days, the majority of popular content management systems ...
Sucuri Blog

What is Cryptocurrency Mining Malware?

| | Black Hat Tactics, cryptominers, Hacked Websites, Malware Updates, Security Education, Website Malware Infections, Website Security
Before we get into the details of “Cryptocurrency Mining Malware”, we need to understand first what cryptocurrency is and what miners are. What is Cryptocurrency? Cryptocurrency is best thought of as digital ...
Sucuri Blog
W97M/Downloader Malware Dropper Served from Compromised Websites

W97M/Downloader Malware Dropper Served from Compromised Websites

| | Black Hat Tactics, Hacked Websites, Malware Updates, Website Malware Infections, Website Security
W97M/Downloader is part of a large banking malware operation that peaked in March 2016. Bad actors have been distributing this campaign for well over a year, which serves as a doorway to ...
Sucuri Blog
From .tk Redirects to PushKa Browser Notification Scam

From .tk Redirects to PushKa Browser Notification Scam

| | Hacked Websites, Malware Updates, Obfuscation, Redirects, Security Advisory, Website Malware Infections, Website Security, wordpress security
In the past couple of years, we’ve been tracking a long-lasting campaign responsible for injecting malicious scripts into WordPress sites. This campaign leverages old vulnerabilities (patched a long time ago) found in ...
Sucuri Blog
More on Dnsden[.]biz Swipers and Radix Obfuscation

More on Dnsden[.]biz Swipers and Radix Obfuscation

| | Hacked Websites, Malware Updates, Obfuscation, Website Malware Infections, Website Security
After recent publication of the Uncommon Radixes Used in Malware Obfuscation article, we found an interesting Twitter thread involving @EKFiddle and @Ledtech3 #EKFiddle [Regex update]: Added Radix Web Skimmer identified by @unmaskparasites ...
Sucuri Blog
Cookie Consent Script Used to Distribute Malware

Cookie Consent Script Used to Distribute Malware

| | Javascript, Malware Updates, User-Agent, Website Malware Infections, Website Security
Most websites today use cookies. Since May 25th, 2018, all websites that do business in the European Union (EU) had to make some changes to be compliant with the EU General Data ...
Sucuri Blog
Load more