New Guide on How to Fix Hacked WordPress Sites
Our involvement in WordPress security has always been a core part of our mission here at Sucuri. We have teams who actively lend advice on WordPress support forums to hacked webmasters. We’ve taken a leadership role by creating sections of the official WordPress Codex relevant to security. Our company has attended over 75 WordCamps and meetups around the world. With more than 25% of the internet r
More Than 162,000 WordPress Sites Used for Distributed Denial of Service Attack
More Than 162,000 WordPress Sites Used for Distributed Denial of Service Attack Distributed Denial of Service (DDoS) attacks are becoming a common trend on our blog lately, and that’s okay because it’s a very serious issue for every website owner. Today I want to talk about a large DDoS attack that leveraged thousands of unsuspecting WordPress websites as indirect source amplification vectors. Any
How We Decoded Some Nasty Multi-Level Encoded Malware
From time to time, we come up with interesting bits of malware that are just calling us to decode and learn more about them. This is one of those cases. Recently, I crossed pathes with this little gem: That snippet is encoded malicious content. The full payload is is much bigger, 12816 characters, to be exact. Seems benign, right? At least it looks interesting. So interesting that I decided to dis
Google Bots Doing SQL Injection Attacks
One of the things we have to be very sensitive about when writing rules for our CloudProxy Website Firewall is to never block any major search engine bot (ie., Google, Bing, Yahoo, etc..). To date, we’ve been pretty good about this, but every now and then you come across unique scenarios like the one in this post, that make you scratch your head and think, what if a legitimate search engine bot wa
Over 10% of Alexa TOP Million Websites Found Not Safe - Infographic Report
Over 10% of Alexa TOP Million Websites Found Not Safe – Infographic Report We scan a lot of websites per day. Through our daily work we see all sizes and types of websites compromised, blacklisted, and filled with various security issues. But, we don’t often aggregate the results to provide a public report of what we are seeing. So last month, we decided to do just that. We decided to scan the mos
More Fake jQuery sites - jqueryc.com
We keep seeing fake jQuery sites popping up and being used to distributemalware. One was jquerys.org, other was jquery-framework.com and the new oneis jqueryc.com (199.59.241.179). And this new one seems to be affecting many web sites in the last few days. All of them have the following on their header or index.php files: window.top.location.href = "httx://www.jqueryc.com"Which redirects any visit
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
