davedd

Glad you liked :)

Nope, we work with hosts that do exactly that. Patch and update if it is outdated, fix if it is broken and even remove any malware if it is infected.

Again, what you guys are doing is great, and I don't want to take that way. My only point is that you were not the first and some have been doing that for a while.

thanks,

That's a good approach, but not novel and not the first host doing that.

Many hosts automatically scan and fix their clients sites and have been doing that for a while. Specially when you are talking about popular CMSs like WorPress, Joomla and drupal.

thanks,

Another issue we identified is that you can find those "hidden" admin panel or URLs that shouldn't be known to the outside, by just refreshing the page a few times and checking all requests.

It is not a best practice, but some companies do and it makes easier for those to be found.

thanks,

Site is back up.

Valid link: https://gudado.com/tools/freeemail.php

It also has a simple/open API that anyone can use (being using that on our own sites).

thanks,

Remote, Anywhere, anywhere

PHP Developer: http://sucuri.net/company/employment

" Sucuri is looking for a Senior PHP Developer with JavaScript & AJAX chops to join our team, and help us continue building the most polished and reliable website malware scanning and cleanup engine in the world.

This developer would be responsible for creating new enhancements as well as improving existing functionality within a high-load, high-availability, distributed environment. "

Details: http://sucuri.net/company/employment

A quick tool for end users to check if their emails were compromised:

http://labs.sucuri.net/?yahooleak

We did an analysis of the dump:

http://blog.sucuri.net/2012/07/analysis-of-yahoo-voice-passw...

Interesting is the lack of "yahoo" as part of the passwords... I would expect a much higher % from a yahoo leak.

Remote.

This position is remote and affords a semi-flexible working schedule.

Job Position: Senior Security Support “Ninja” Analyst

Description: As a Senior Analyst you will be responsible for:

-Handling our most complex security cases (hacked servers, broken sites, hidden malware, etc)

-Troubleshooting broken websites (WordPress, Joomla, osCommerce, Magento, vBulletin, Drupal, and more)

-Direct engagement with the research team to expand our engine

-Queue wrangler, engaging with Junior staff and streamlining processes

As you might imagine, its not all unicorns and rainbows we’re looking for a technical type and specifically someone with the following traits:

-Advanced Linux experience – CLI

-Server hardening and security experience (using firewalls, NIDs, HIDs, etc)

-Experience with log analysis, malware analysis or forensics a big plus

-System administration experience with WordPress, Joomla, ,etc osCommerce or other CMSs

-Shell scripting required

-PHP and C coding experience useful, but not required. -Open source and community participation and contributions a plus

*We love to see active community engagement. If you’re already assisting on forums (WordPress.org, open source project, github, stackoverflow, stopbadware) please include your account name as a reference

Link: http://sucuri.net/company/employment

In terms of countries (based on the IP address of the spammer):

#1 USA (30%)

#2 China (20%)

#3 Russia (6%)

#4 Brazil (4%)

You would be surprised:

http://www.shodanhq.com/search?q=PHP-CGI

It prevents a user visiting those sites from getting compromised.

However, the spread if this is via SQL injection, so as long as those sites are insecure, it will keep going..