Malware
On by default for all clients, this option leverages our scanning service to identify malware, SPAM injections, website errors, disabled sites, database connection issues and code anomalies that require special attention.
Our scanner is highly sophisticated and designed to identify a number of different infection types. The monitoring is divided into two unique methodologies. The first is based on remote scans and the second on server level scans.
Remote scans have the ability to detect the following infection types:
-
Obfuscated JavaScript injections
JavaScript Obfuscation is a malicious code present on fraudulent websites or illegally injected on legitimate but hacked websites without the knowledge of the administrator. The intention behind these code injections is to detect and exploit vulnerabilities on applications installed on your computer to install malicious and unwanted software that compromise the security of all data on the affected PC….
Read More -
Cross-Site Scripting (XSS)
Cross-Site Scripting (XSS) attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted web sites. XSS attacks occur when an attacker uses a web application to send malicious code, generally in the form of a browser side script, to a different end user….
Read More -
Website Defacements
The term “website defacement” refers to any unauthorized changes made to the appearance of either a single webpage, or an entire site. In some cases, a website is completely taken down and replaced by something new. In other instances, a hacker may inject code in order to add images, popups, or text to a page that were not previously present….
Read More -
Hidden & Malicious iFrames
Clickjacking (also known as user-interface or UI redressing and >Hidden & Malicious iFrames overlay) is an exploit in which malicious coding is hidden beneath apparently legitimate buttons or other clickable content on a website…..
Read More -
PHP Mailers
PHP’s inbuilt mail() function provides very limited mail functionality. Although its easy to send text emails, but thats pretty much the only thing you can do with it. If you need extended functionality like HTML emails or attachments, you can always go through a couple of hundred pages of mail specifications at IETF ….
Read More -
Phishing Attempts
Phishing email messages, websites, and phone calls are designed to steal money. Cyber criminals can do this by installing malicious software on your computer or stealing personal information off of your computer….
Read More -
Backdoors
A backdoor trojan differs from a trojan in that it also opens a backdoor to your system. They’re also sometimes call Remote Access Trojans (RAT). These are the most widespread and also the most dangerous type of trojan…
Read More -
Code Anomalies
Acode anomalies on architectural decompositions. In order to detect these code anomalies specific detection strategies were used on the basis of previous studies. In some detection strategies we had used symbolic constants in the place of thresholds (e.g. LOW and HIGH). The choice of these values is derive from general evidence-based guidelines for selecting thresholds and it could be obviously adapted according to application-specific contexts and the designer’s experience..
Read More -
Java Drive by
A Java Drive-By is a Java Applet that is coded in Java and is put on a website. Once you click “Run” on the pop-up, it will download a program off the internet. This program can be a virus or even a simple downloader. If you’d like to get the source code or wanna know more information about a Java Drive-By…
Read More -
Social Engineering Attacks
The various psychological mechanisms that are at work in social engineering attacks social engineers use to manipulate users into cooperating with their schemes. Human based attacks focus on misleading people in person or over the phone and often use impersonation to trick users into releasing information. Computer based attacks still target the human users of computer systems, but do so via computer based techniques such as email scams, email attachments, websites, instant messaging, etc…
Read More -
SEO Blackhat Spam
There are stark differences in the approach and long-term results of white hat and black hat search engine optimization. Though both types of SEO have their proponents, most companies/websites with long-term, stable, and sustainable goals will tend to stay away from the dark-colored variety…
Read More -
Pharma Hacks
This attack is very interesting because it is not visible to the normal user and the spam (generally about Viagra, Nexium, Cialis, etc) only shows up if the user agent is from Google’s crawler (googlebot). Also, the infection is a bit tricky to remove and if not done properly will keep reappearing….
Read More -
Conditional Redirects
Some users are complaining that when they search for my site on Google, they are redirected to a site full of malware/virus/spam, but when I access, it looks fine. I even scanned it with multiple anti-virus and they didn’t detect anything…
Read More -
Mobile Redirects
Thousands of mobile apps developed for the Apple iOS platform can be forced to display phony, even malicious content, because of a vulnerability that allows an attacker to redirect traffic to a third-party site and persistently serve content from that location…
Read More
Server Side scans are included with all malware removal plans, but must be configured separately. They have the ability to detect these infection types.
Scanning is most comprehensive when both scan-types are used in unison. Imagine it like your vision. When you use one eye, you aren’t able to see everything in front of you, but opening both eyes allows you to fill in the blind spots.
The remote scanner emulates a subset of user agents and referrers that allow the scanner to treat payloads that present themselves to the end-user’s browser. This is important because it’s how your end-users interact with your website.
The server-side scanner is dependent on server-level access and has the ability to crawl every file on your server. This makes it ideal for things that don’t present themselves on a client’s browser, like Backdoors and Phishing files.
Blacklisting
This option is set “on” by default for all users. We recommend that it is left active because blacklisting and reasons for blacklist statuscan be confusing. There are a number of blacklisting authorities that monitor for malware, SPAM, and phishing attempts. Our blacklisting option leverages the APIs for these authorities and insures you’ll that know when your site is hacked before it ever appears on a blacklist:
- Sucuri
- Google Safe Browsing
- Norton
- AVG
- Phish Tank (Phishing Specifically)
- McAfee SiteAdvisor