Malware na cuvanjedece24h.rs
#1
VirusTotal i Sucuri indetifikuju sajt cuvanjedece24h.rs kao maliciozan. Brzim pregledom nisam uspeo da nađem šta je tačno zaraženo.

VirusTotal: https://www.virustotal.com/gui/url/696ef.../detection
Sucuri: https://sitecheck.sucuri.net/results/htt...dece24h.rs

[Image: attachment.php?aid=534]

[Image: attachment.php?aid=535]


Attached Files Image(s)
       
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
Reply
#2
s obzirom da je wordpress, - samo i to je dovoljno...ali
kao sto @ivan rece kod deluje ok (los primer kada je ceo izvorni kod dostupan) ima i nekoliko plugins koji su outdated kao i nekoliko RCE ranjivosti
Reply
#3
Nisam uradio detaljnu analizu svih .JS mozda ima neke specijalne trigere. Ali jesam probao da otvorim sajt na Windowsu/Linuxu/macOS i nista se nije specijalno desilo...
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)