Malware
11 articles tagged Malware, newest first.

Finding Rogue Admin Accounts Across Every Joomla Site You Manage
Attackers plant admin accounts to walk back in after you clean the files. How to find rogue admins across every Joomla site you manage, from one screen.

Reinfected? Check Every Crontab, Not Just Yours
Your cPanel cron jobs look clean but the site reinfects anyway. The cron rebuilding the malware is hiding in a crontab your account can't see. Here is where.

Hacked Yesterday, Exploited Today: Why One Cleanup Is Never the End
The first hack plants a dormant dropper. The real damage comes in the second wave, days or weeks later. Here is why monitoring beats one-shot cleanup.

Delete 9,000 Hacker .htaccess Files in One Click
Hackers drop malicious .htaccess files in every folder of your site. mySites.guru deletes the stray ones in one click and leaves the rest untouched.

OVH Flagged Our Plugin as Malware. It Is Not, and Here Is the Proof.
OVH's scanner flagged our legitimate bfRestore.php file as malware and cut outgoing connections and email across whole hosting plans. Here is why it is safe.

Suspect Content vs Hacked Files: Two mySites.guru Tools, One Big Difference
mySites.guru now has two tools: Suspect content matches a file's content, Hacked files matches its hash. Learn the difference and triage your audit in minutes.

Spotting .sorry Ransomware on Your cPanel Hosts
Sorry ransomware encrypts cPanel-hosted sites via CVE-2026-41940 and appends .sorry to every file. mySites.guru now flags those files in every audit.

Breeze, Cloudways Cache Plugin, Has a Remote Code Execution Bug
Wordfence blocked 3,936 attacks in 24 hours against Breeze Cache below 2.4.5. CVE-2026-3844 is unauthenticated RCE on 400,000+ WordPress sites.

The WordPress Plugin You Trusted Was Sold to an Attacker
A buyer acquired 31 WordPress plugins, planted a backdoor in August 2025, and activated it in April 2026. Here is what happened and how to check your sites.

Is My WordPress Site Hacked? How to Check and What to Do Next
Think your WordPress site has been hacked? Here are the signs to look for, how to confirm it, and what to do in the first 24 hours to contain the damage.

AI-Powered Malware Analysis Now Available in mySites.guru
Send flagged suspect files to Claude or GPT for instant malware analysis. Crowdsourced cached results shared across all subscribers.