The Balada Injector is a well-known family of malware that primarily targets WordPress sites. It mass-injects malicious JavaScript into websites, often taking advantage of vulnerabilities...
WAF vs CMS Firewall Security Plugins
For robust security, especially in high-risk environments, a WAF like MoeSec offers an additional layer of defense that mitigates risks associated with CMS security plugins....
Analysis of a newly found Malicious JavaScript on WordPress Sites
The MoeSec security team recently discovered a piece of malicious JavaScript on a WordPress website. This script was injected using the Simple Custom CSS and...
Credit Card Skimmer Targets Sites using Magento, WooCommerce and OpenCart
This article analyzes a specific skimmer affecting Magento, WooCommerce, and OpenCart based websites, deciphers its malicious code, discusses how it operates, and provides steps for...
New SocGholish Malware Found on WordPress Websites
New wave of SocGholish JavaScript malware injection Found on many WordPress Websites loading malicious code from MEMORYLOADER[.]COM
Uncovering Encoded JavaScript Malware: Analysis of a new Malware Campaign
MoeSec security researchers recently discovered a new strain of javascript malware that utilizes advanced encoding techniques to evade detection. This malware leverages a combination of...
JavaScript malware injection utilizing WP Rocket to delay execution
This JS malware is utilizing the WP Rocket plugin “rocketlazyloadscript” feature to delay the execution to remain stealthy and undetected
How to Clean Hacked Website and Prevent Future Attacks
In today's digital landscape, website security is of utmost importance. Hackers are constantly seeking vulnerabilities to exploit and compromise websites. In this article, we will...
A new malware wave redirecting visitors to spam and phishing sites
A new Mal.Metrica wave redirecting visitors to spam and phishing sites by exploiting vulnerable Responsive wordpress theme
Magento Malware, Attacks and Security Defenses
Magento is a popular e-commerce platform used by numerous businesses worldwide. However, its popularity has made it a prime target for cybercriminals seeking to exploit...