During the past year, our Remediation department has seen a large increase in the number of fully spammed sites.

The common factors are strangely named and unusually located favicon.ico files, along with the creation of “bak.bak” index files peppered around the website.

In the majority of the cases, the pattern is similar regardless of the size of the website or the CMS being used. We have found WordPress, Magento, Joomla, and even HTML-only sites impacted by this campaign.

Continue reading The Strange Case of the Malicious Favicon at Sucuri Blog.

Via Sucuri.net