AT&T Global Employee MFA Phishing
A phishing page targeting AT&T employee login credentials including various forms of multifactor authentication like MTIPS®, which was created for the US federal government.
Plugin Killer: WordPress Malware Disables Security Plugins
A malicious PHP file that was disabling common WordPress security plugins before injecting SEO spam onto the infected website.
Hidden Seo Spam Links
Many times when a website has been injected with SEO spam the owner is unaware of it until they begin to receive warnings from search engines or blacklists. This is by design as the attacker arranges the display of the website so that the links are not going to be visible by average human traffic.
No SEO spam visible to human traffic, but it exists out of sight.
One way to do this is to use design elements to “push” the injected SEO spam links off the visible portion of the website.
Magento JS Skimmer Hidden in CSS Request to Malicious Domain
It’s important to an attacker for a skimmer to remain undetected for as long as possible, so they do research and use various techniques to make the request that loads the skimmer look innocuous.
wp_uploader.php: Simple and Effective Uploader
It takes less than 100 characters of PHP code to create an uploader that can be placed on a compromised website to act as a backdoor.