There are many guides that provide information on hardening WordPress. Typical advices include updating everything, maybe protecting admin area and include files. One of the most popular advices is changing admin user name to something else. This advice is completely wrong usually. Not using “admin” username should protect ones website Read more…
WordPress powers more than a half of sites having some sort of CMS. Thus it is not surprising that these websites come under automated attacks and get infected sometimes. So, what to do? Well, that depends on type of attack used and its results. Some possible ways of site to Read more…
The Flamer worm caused the main buzz for AV and security companies in the late May 2012. It is kind of understandable – it is espionage tool and we do not see many targeted attacks that might be caused by governments. Everyone tried to cash in: some claimed that it Read more…
WordPress is one of the most popular blogging platforms around. However, if you self-host your blog (and not host on wordpress.com), you are responsible to make it more secure. WordPress blogs are constant target of automated and manual hacker attacks. When your site gets infected, it redirects your visitors to Read more…
Although websites are usual way to distribute malware, email is far from forgotten by malware makers. Spam volume goes down, but targeted spam messages work wonders. One of the popular tactics is sending out mails with zipped files or links to them claiming this is document you asked for, or Read more…
There is a spam campaign going on Twitter that promotes Blackhole exploit kit or some fake antiviruses. The messages look like “young girls are waiting” or similar. Sure, these messages look spammy like hell, but some people click on them and land in fake online scanner pages. Such pages resemble Read more…
Online reputation is important. Everyone checks product information and reviews online. In many cases, more than a single source is checked. Thus it is critical to have decent reputation which is quite hard for people with malicious intents. However, it is still possible and malware makers use more than a Read more…
WordPress is gaining popularity as CMS platform. It is simple, requires not too much learning and there are lots of themes available to choose from. However, bare WordPress installation lacks multi-language support. This is unsuitable for some markets, especially if you target several countries. There are 2 main strategies how Read more…
It is not a big secret that I like to try new PHP frameworks. Yii framework was on my list of things I should try, so I have experimented with it a bit. To summarize, I have switched back to Cake PHP. But let me explain further. The framework itself Read more…
Rogue AV market was mostly dead through August and September. Although this might be caused by Chronopay raid, the timing of the raids did not match with the decline. Additionally, we have seen significant shift to different kind of malware: google redirects, new kinds of rootkits, Bitcoin mining software and Read more…