How botnets are created with hijacked Worpess, fake Flash downloads and Node.js

Re:How botnets are created with hijacked Worpess, fake Flash... by josefresco on Monday November 23, 2015 @12:25PM (#10615766)

No one security solution is enough. While I also like Sucuri, it's Malware scanner tool missed a handful of infections on a recent clean up job. Microsoft Security (or whatever they're calling it now) actually found more (once I downloaded the site's files via FTP)

Moral of the story, don't rely on just a plugin, or a tutorial for your WP security.

[ Parent | on HN ]

Re:How botnets are created with hijacked Worpess, fake Flash... by perezbox on Monday November 23, 2015 @03:19PM (#10617030)

Hey @josefresco

Do you have any samples? One of the biggest reasons for this is if it's endpoint malware, versus website malware. Two very different things as you might know. Regardless, would love some samples if you any.

Tony

[ Parent | on HN ]

Re:How botnets are created with hijacked Worpess, fake Flash... by josefresco on Tuesday November 24, 2015 @07:40AM (#10620357)

I do have a recent example - worked out the issues with WPEngine, but it took quite a few scans. I believe they work with you, so you're probably already aware. Prior to being hosted with WPE, we used the Sucuri plugin but all scans were clean.

[ Parent | on HN ]

Re:How botnets are created with hijacked Worpess, fake Flash... by dotBen on Monday November 23, 2015 @06:51PM (#10618191)

(going to give context for his ask + big up @perezbox here -- he's the CEO of the awesome Sucuri)

@perezbox - you might want to mention that in your HN Profile. :)

[ Parent | on HN ]