Fake WordPress PBN plugin hides malware in the database
A recent Sucuri investigation has uncovered a layered WordPress infection that used a fake plugin,…
Malware
What to do when a third-party data breach puts your website at risk
Data breach notifications are becoming increasingly common. They often arrive with a familiar message about…
WordPress DDoS protection: how to keep your site online
When your website goes offline, your business feels it quickly. Enquiries stop, sales can be…
Joomla SEO spam backdoor: how hidden malware can hijack your website traffic
If your website suddenly starts showing product links, pages or search results that have nothing…
Shadow directories: a quiet way to hijack WordPress permalinks
We’re seeing a crafty SEO-spam tactic against WordPress sites: attackers create shadow directories that mimic…
Fake “Java Update” pop-up hidden inside a malicious WordPress plugin
A new social-engineering tactic is targeting WordPress sites with a convincing “Java Update” pop-up. It…
Malware intercepts Googlebot with IP-verified conditional logic
Some attackers now hide spam content from people — and show it only to search…
Fake browser update pop-ups targeting WordPress administrators
A new social-engineering campaign is abusing a malicious WordPress plugin to show convincing fake browser…
Auto-login backdoor disguised as a JavaScript data file in WordPress
A stealthy backdoor is targeting WordPress sites by posing as a harmless JavaScript asset. In…
Malvertising hiding in plain sight on WordPress websites
We’re seeing a malvertising campaign that quietly injects third-party scripts into WordPress sites. It looks…