What is Sucuri Labs?
Here at Sucuri Labs is where we share our technical research. We are a group of website security professionals who are passionate about discovering emerging web-based malware and software vulnerabilities.
Not only do we create tools and detection rules for our customers, we also bring awareness to the website security community. Our mission is to help make the internet a safer place.
What do we do?
We dissect, analyze, and investigate web malware and evaluate web applications (CMS, plugins, themes, extensions, etc.) looking for vulnerable code. Every piece of software we investigate is used to improve our tools, by creating new detection and block rules, as well as to create different learning opportunities for web developers, administrators, and our infosec community.
Visit labs.sucuri.net to read more about:
- Research Notes
- Our researchers love to share their discoveries. In this section, you'll find the latest reports on malware, obfuscation methods, attack trends and fun facts about researching threats. Think of this section as the notepad next to the researcher's computer.
- Our researchers love to share their discoveries. In this section, you'll find the latest reports on malware, obfuscation methods, attack trends and fun facts about researching threats. Think of this section as the notepad next to the researcher's computer.
- Threat Reports
- This section shows the latest payloads detected by SiteCheck and active threats blocked by the Sucuri WAF.
- This section shows the latest payloads detected by SiteCheck and active threats blocked by the Sucuri WAF.
- Malware Signatures
- Browse definitions for malware we often encounter on scanned sites. If your site presents any sign of malware, spam SEO, or suspicious JavaScript, SiteCheck will link you to this section.
How do we do it?
We collect data from several sources, including but not limited to: honeypots, partnerships with other labs, online searches, investigations of infections on new and existing customer sites — we even receive malware samples by email (if you want to send suspicious code to us, please email a password protected zip file to labs@sucuri.net. Use virus as the password).
Vulnerability researchers are always reviewing new versions of popular software and checking for code that could be exploited by hackers. All code we review is done first by state-of-the-art assisting software and all findings are manually reviewed.
Here at Sucuri Labs we follow a responsible disclosure process and assist, when possible, the software developer on how to mitigate the vulnerable code. No findings are disclosed unless we are sure they were fixed.