The Malicious Code Hiding in My Client's Database

This site does not allow itself to be embedded. You can still read it on the original site — the toolbar below keeps your place in the directory.

It took about thirty seconds to realize this wasn't a routine support ticket. The "weird link" my client found was malicious JavaScript, and it wasn’t immediately visible in templates. It was hidden in the database—a security breach designed to load external scripts that could compromise visitor security. The Backstory My first instinct was to check the templates on the live server—nothing. Then I…

Read on block81.com ↗