Quttera web security blog

Web Ads-ministrator 101

21 Jul, 2016 malvertising malware removal malicious javascript

Malicious ads and website reputation Malvertising is one of the most profitable businesses in the cyber hacking industry. Exploiting website inventory is highly beneficial for cyber criminals as it is then sold to redirect traffic to gambling, adult, pharma and similar kinds of websites. Needless to say, that its damage to both publishing websites and advertising network reputation is huge. Ideally, Web Admins are the ones responsible for checking the Ads that their site is showing.

Website defacement with button click

10 Jul, 2016 check-website-for-malware malware-cleanup website-malware-scanning-products hacking

Website Defacement is just a click of a button In the past few months, Quttera malware researchers encounter a significant rise in website defacements by hackers. Government websites, among the others, were under such cyber-attack and thus getting a lot of attention and concern from the public. Interesting fact that, in some cases, hacker groups used defacement as their "cyber branding". The number of such sites being defaced is then used as a global ranking of a responsible hacker group.

SQLMAP.py - A friend or a foe

30 Apr, 2016 antimalware blacklisted website check website for malware vulnerability exploits website malware cleanup sqlmap.py

Security tools serving good and bad This is a python script used by Cyber Security Analysts to check for vulnerabilities in website . Like any other network security tool, it is being utilized by many, meaning it was also being utilized by the bad guys a.k.a "hackers". While we were browsing the dark web, we stumbled upon a hacking forum where you need to take an exam before you could join their group.

RedKit Malware Still Alive

29 Apr, 2016 redkit exploit kit hidden malicious iframe malware cleanup malicious javascript remove blacklisting remove malware

RedKit Malware Still Alive RedKit Malware RedKit malware as detected by Online Malware Scanner Background Back in 2013, we posted about RedKit infecting significant number of websites. It appears that, three years later, the statistics of the websites submitted to online malware scanner show the revive of this malware among infected websites. Malicious action Malicious iframes are often used to distribute malware hosted on external web resources(websites).

Traffic Redirection Malware On Website

21 Apr, 2016 malicious javascript remove blacklisting remove malware malicious traffic website malware cleanup obfuscated malicious JavaScript blacklisted website traffic direction systems

Traffic Distribution System (TDS) On Infected WebsitesThis malware technique is widely used to monitor and redirect traffic from compromised website to malicious content or paid referrals. In past, we highlighted similar cases in our blog: Blacklisted website used to drive traffic to ‘penny stock website’ Malicious TDS flow Malicious Traffic Distribution System diagram BackgroundThreatSign! client received complaint from his customer that his website got blocked when accessed from Google Chrome.

FilesMan Backdoor Malware On Your Computer

1 Apr, 2016 blacklisted website malware removal malicious javascript filesman backdoor

FilesMan Backdoor Malware On Your Computer FilesMan is being abused in the wild What is FilesMan? It is a File Manager used to explore the files in a computer. It is the most basic malware tool that attackers upload to your website as a form of backdoor to browse your files. Some of these File Managers are sophisticated and has their own GUI (Graphical User Interface), some are capable of uploading and downloading files from your website as if the attackers were in front of your computer browsing it personally.

XSS - Cross Site Scripting Malware

15 Mar, 2016 check website for malware malicious javascript blacklisted website hidden malicious iframe malware removal malware cleanup xss malware cross site scripting jquery malware

What is Cross Site Scripting (XSS)? May 26th 2016 jetpack disclosed a XSS vulnerability discovered in their popular plugin. We would to take this opportunity and describe what is XSS. Cross Site Scripting or XSS attack refers to injection of the malicious code or malicious payload into pages of legitimate website. Further, when these compromised pages are visited by website users, the injected malicious code (or payload) is executed by client-side application (visitor's web browser) and performs the actual malicious action such as: redirecting visitor to another website, download and installation of malicious code, showing adult ads and etc.

How To Locate Hosts That Infecting Or Sending Spam From Your Word Press Installation

25 Jan, 2015 blacklisted website malware removal malicious javascript

Steps To Discover Malicious Hosts Attempting To Access Your Website When dealing with previously cleaned website that got re-infected over and over again, it is essential to monitor/check who and when tried to connect to website. Usually, POST request is used to access the malware files to launch malicious script/command. Thus, once you have the file names you can review the log files (e.g. access.log for Apache) to detect the servers that were sending these malicious requests.

Top 7 website hacking 'trump cards' turning your life into hell

23 Jan, 2014 blacklisted website malware removal malicious javascript malware cleanup spam malicious ads remove malware

Introduction This article highlights well-known website vulnerabilities, bad practices, flaws and security issues that allow hackers to compromise websites. Its purpose is strictly educative, and it should be used as a guide to enhance the web security applied to websites and web applications. Material presented below is gathered based on common mistakes made by Internet users having very limited computer science skills. The base level information shared here depicts an entire arsenal that leads to a successful cyber attack, resulting in legitimate websites getting blacklisted by search engines and security manufacturers.

My site is blacklisted. What next?

10 Sep, 2013 blacklisted website malware removal malicious javascript

Quttera's support team is being constantly contacted by website anti-malware monitoring customers whose website(s) were blacklisted. This post lists several (not all) blacklisting authorities and how to submit your site for (re)testing by them. First, you should make sure your website no longer hosts malware, spam or any other potentially harmful content. You can do it by yourself or if you're ThreatSign customer you can simply let us do it for you.

Blacklisted website used to drive traffic to 'penny stock website'

8 May, 2013 blackhat SEO Web malware scan reports and analysis obfuscated malicious JavaScript hidden malicious iframe traffic direction systems malicious javascript

Obfuscated malicious JavaScript code generated hidden iframe to drive traffic to customer website Background Online Website Malware Scanner has identified malicious JavaScript code injection in the scanned website. Usually, such malicious obfuscated JavaScript code is used to build malicious iframe invisible to the website user and which downloads content from remote malware distributor. This website is located in Ukraine and it is used by Traffic Direction System (TDS) managed by malicious domain revmihyr[.

Testing Of Malware Detection

18 Mar, 2013 web malware scan reports and analysis vulnerability exploits website security hacking remove malware malware on website malware cleanup antimalware

Quttera as the leading provider of anti-malware services and solutions, that protect business-critical information in the cloud, hybrid and on-prem, brings the advantages of innovative heuristic, behavioral and AI technologies built-in in our scanning engine.

Malware clean-up and hacking recovery for websites

Get your website cleaned and removed from blacklists. Prevent traffic loss and protect your visitors now.

Emergency
$249 / yr
1 Website
Initial Response Time within 4 hrs.
Manual Malware Removal / Full Website Audit
Blacklisting removal
Web Application Firewall (DNS-based WAF or Endpoint WAF)
Virtual Patching and website hardening
Free SSL Certificate with the DNS-based Web Application Firewall
all features...
Create Account

Essential Security
$10 / mo
1 Website
Initial Response Time within 12 hrs.
Web Application Firewall (DNS-based WAF or Endpoint WAF)
Virtual Patching and website hardening
Free SSL Certificate with the DNS-based Web Application Firewall
External & Internal Malware Scanning
all features...
Create Account

more plans

Need help? contactus@quttera.com

Join our mailing list to receive free email updates

Subscribe now

Latest Posts

tag

Quttera | BLOG

A blog about real-life cybersecurity attacks, web malware and how to protect your website and online business from cybercriminals.