httpd | DataProtectionCenter.com

When Web Servers Serve Evil

13

May

2013

In the last few months, we have witnessed a rise in the number of cases of modified Web servers that inject malicious redirections into every website that it hosts. One example was the malicious Apache module (Linux.Chapro and Trojan.Apmod) that we blogged about recently. A newer example is Linux.Cdorked, about which our friends at ESET […]

Category General Written by Symantec Security Response Blog 0 Comments

Apache Binary Backdoors on Cpanel-based servers

26

Apr

2013

For the last few months we have been tracking server level compromises that have been utilizing malicious Apache modules (Darkleech) to inject malware into websites. Some of our previous coverage is available here and here.However, during the last few months we started to see a change on how the injections were being done. On cPanel-based […]

Category Security Written by Sucuri Blog 0 Comments

Linux/Cdorked.A: New Apache backdoor being used in the wild to serve Blackhole

26

Apr

2013

Last week, our friends at Sucuri sent us a modified version of an Apache webserver redirecting some of its requests to the infamous Blackhole exploit packs. Sucuri has published a blog post on this attack. Our analysis of this malware, dubbed Linux/Cdorked.A, reveals that it is a sophisticated and stealthy backdoor meant to drive traffic […]

Category General Written by We Live Security 0 Comments

The Latest in IT Security

Posts Tagged ‘httpd’

When Web Servers Serve Evil

Apache Binary Backdoors on Cpanel-based servers

Linux/Cdorked.A: New Apache backdoor being used in the wild to serve Blackhole

Categories

Featured

Archives

Latest Comments

About Us

Contact Us