The Security of the WordPress Platform

Roughly a quarter of all websites on the internet are built on WordPress. You’d think that such popularity would ensure that the platform is flawless and secure! But did you ever wonder that this popularity could be the very cause of security breaches… Continue reading The Security of the WordPress Platform

Spam Injector Disguised as License Key in WordPress Website

Here at Sucuri, we clean WordPress websites every day. There are various types of common malware, but when we stumble upon a different scenario, our research team likes to dig deeper and conduct a complete investigation.
A license key is a place where… Continue reading Spam Injector Disguised as License Key in WordPress Website

Backdoor Uses Paste Site to Host Payload

Finding backdoors is one of the biggest challenges of a website security analyst, as backdoors are designed to be hidden in case the malware is found and removed.
Website Backdoors
A backdoor is a piece of malware that attackers leave b… Continue reading Backdoor Uses Paste Site to Host Payload

Google and Facebook Used in Phishing Campaigns

We’ve all seen sketchy looking emails or texts with malicious links to click on. There are still people who fall for these more obvious types of scams, however, phishing scam messages are designed to be deceiving. They use methods that appe… Continue reading Google and Facebook Used in Phishing Campaigns

Unwanted Ads via Baidu Links

The malware attack that began as an installation of malicious Injectbody/Injectscr WordPress plugins back in February has evolved since then.
Some of the changes were documented asUpdates at the bottom of the original blog post, however, every we… Continue reading Unwanted Ads via Baidu Links