Today we released version 2.1.1 of the ISPProtect Malware Scanner. This version now supports the use of PHP 8.0 and 8.1, and the thread support we introduced in version 2.0 is now included in the current stable version. Furthermore, several
Malware Log Analysis: Don’t Let the HTTP Code Fool You
An essential component of the analysis and cleanup of websites infected with malware is viewing and evaluating the log files. However, even here there are things to consider that might seem odd at first glance. Let’s say you find a
ISPProtect version 1.32.3 with FoxAuto web shell detection
Version 1.32.3 of ISPProtect released today now also detects FoxAuto including different variants. FoxAuto is a collection of tools that can be used to download and execute additional malicious scripts via vulnerabilities in a website (WordPress, its plugins, Joomla, etc.).
New version with extended database scan
With today’s version 1.29.0 of ISPProtect we have made some improvements to the code. The database scan has also been enhanced. In the standard mode using the parameter –db-scan only a small subset of the malware heuristics will be applied
New feature: wildcards in scan path
Today the new version 1.26.1 was released. From now on it is possible to use wildcards for the scan. For this there are the new parameters –include and –include-from, with which it is possible to narrow down the paths and
New scanner version (V1.26.0) reduces disk I/O
Today the new version 1.26.0 of the ISPProtect malware scanner was released. In this release there are some new features that make our scanner even better. Speed and disk I/O We’ve re-implemented the file search from scratch. This has enabled
Checking the WordPress settings after cleaning up a hacked or infected website
Few days ago I was hired to clean-up a hacked WordPress page that was affected by the security issue in the WP GDPR Compliance plugin. The attacker created a new admin user and changed/uploaded some files to WordPress. For that
New major release of ISPProtect Malware Scanner
Today we are proud to announce our next major release 1.25.0. What has changed? We introduced a new scan level 1.1 to the scan that searches for PHP code hidden inside of image file names. It is a wide-spread tactic
New version 1.24.13 with new malware heuristics
Today we released the new version 1.24.13 of ISPProtect malware scanner. It includes some new malware signatures and new heuristics for dynamic malware code of which we want to show you a new type of malware that is hard to
Severe remote execution security issue in Drupal announced
On March, 28th drupal announced a severe security issue in Drupal 7 and 8: https://www.drupal.org/sa-core-2018-002. The issue allows unprivileged users to execute code on the server and disclose all data normally not accesible through the web. The security issue is
Deploy ISPProtect with Puppet
A Puppet Module for ISPProtect is available at Puppet Forge now. Puppet is a tool to automate the deployment and operation of software in large environments. The ISPProtect Puppet module, developed by Eelco Maljaars, can be found at Puppet Forge:
ISPProtect 1.14.0 released
Today we released the brand new version 1.14.0 of our malware scanner ISPProtect. What’s new New Heuristics and signatures were added. The scan performance has been improved. Marius BurkardMarius Burkard has been working as a software developer for 20 years