Why You're Getting Bounce Notices for Emails You Never Sent
The short version: If your inbox is suddenly full of bounce notices for emails you never sent, you almost certainly haven’t been hacked. A spammer somewhere has picked your address off a list and used it as the “return address” on a batch of spam. The failed deliveries — the…
How a Chinese Webshell Survived 16 Months by Pretending to Be a Joomla Plugin
The short version: A backdoor disguised as a legitimate Joomla plugin called “MetaCache” lived on two websites for sixteen months without triggering any scanner. The attacker used it to walk back in this past weekend. We found it, removed it, and traced the persistence pattern.…
Cleaning Up a Joomla Hack Isn't Enough โ What's Hiding in cPanel
The short version: When a Joomla site gets hacked through something like the recent JCE Editor vulnerability, most cleanups focus on the…
The JCE Editor Hack โ How to Check Your Joomla Site (and Clean It Up Easily)
The short version: Over the past week, hackers have been actively exploiting a vulnerability in JCE Editor โ one of the most popular…
What's New in ochResponsiveImages 4.2.0 โ And Why It Matters for Your Site's Speed
The short version: One of the Joomla extensions we install on every site in our Monthly Joomla Website Management package โ…
What We Found Cleaning Up a Migrated Hosting Account
The short version: A website on one of our shared servers had been getting hacked over and over for months. Every time we cleaned it up,…
Add comment