Important Vulnerability on Advanced Custom Fields Plugin for WordPress

We are thrilled to share that Webuzo, a leading web hosting platform that simplifies the management of cloud or dedicated servers, has officially integrated ImunifyAV as its default antivirus software, recognizing the importance of top-notch security for its users.

Imunify360 researchers have recently found a wave of attacks exploiting a known vulnerability in Chamilo LMS (CVE-2023-34960) to escalate and execute arbitrary commands. Chamilo is an e-learning platform, also called Learning Management Systems (LMS), widely used by Universities and NGOs with a total of ~85k installations.

сPanel is one of the most popular control panels on the web with a broad community and a large number of extensions. But as always, popularity has its price: every month Imunify web security analysts detect tens of thousands of specialized automated attacks on cPanel users’ accounts. The vast majority of such attacks are simple Brute-Force, however, there is always a portion of more sophisticated attempts like SQLi and others.

Dear customers,

We've identified a concern with Yandex bot crawling that may impact your website's visibility. Our investigation shows that, besides legitimate Yandex bots, some traffic from these IP addresses may be malicious.

While we're collaborating with Yandex's support team for a solution, here are some interim measures:

In today's digital landscape, monetizing websites through ads has become a standard practice, but it comes with security trade-offs.

Cybercriminals, in their relentless pursuit of exploiting vulnerabilities, have recently focused their efforts on a critical flaw in the WooCommerce Payments WordPress plugin. This flaw, tagged as CVE-2023-28121, is a perfect example of how an unauthorized attacker can impersonate users and potentially gain complete control over websites. The sheer scale and potential for site takeovers underscore the importance of deploying comprehensive cybersecurity solutions, such as Imunify360, to detect and protect against such threats in real time.

As the world becomes increasingly digital, e-commerce platforms have become a prime target for cybercriminals seeking to exploit vulnerabilities and gain unauthorized access to sensitive information. Recently, a critical security flaw was uncovered in the popular WooCommerce Stripe Gateway WordPress plugin, putting hundreds of thousands of e-commerce websites at risk. In this blog post, we will delve into the vulnerability details and explore how utilizing the Imunify360 server security suite can help prevent such incidents.

Imunify360 has a robust set of mitigation that acts proactively against advanced attacks, and its layer works either on L7 (http request) against known vulnerabilities and also at runtime by our innovative Proactive defense module, and behind the scenes, there's a team of malware experts researching 24x7 and figuring out in-depth the malware behavior.

In today's digital era, cyberattacks have become a harsh reality, threatening the security of businesses and individuals alike. A new type of attack has emerged, known as a "web skimmer," which targets explicitly e-commerce websites, aiming to steal personal information and credit card data. The cunning use of legitimate websites as "command-and-control" servers sets this attack apart from its predecessors, enabling hackers to discreetly distribute malicious code while concealing their activities. The repercussions of such an attack are far-reaching, potentially compromising the sensitive data of thousands of unsuspecting website visitors. However, there is a solution that can provide an effective shield against these web skimmers: Imunify360.

Cronjob is a time-based job scheduler in Unix-like operating systems, including Linux, that allows users to schedule and automate repetitive tasks. The name "cron" comes from the Greek word "chronos," which means time.

Infection of cron files is a serious threat to any Linux system that uses task automation. Hackers can use these files to regularly launch malicious programs and scripts.