Best WordPress Hosting
 

Dissecting a Clever Malware Sample for Optimized Detection and Protection

via wordfence.com => original post link

As part of our product lineup, we offer security monitoring and malware removal services to our Wordfence Care and Response customers. In case of a security incident, our incident response team will investigate the root cause, find and remove malware from your site, and help with other complications that may arise as a result of an infection. During the cleanup, malware samples are added to our Threat Intelligence database, which contains over 3.5 million malicious samples. In some good news, we find that the vast majority of cleans are conducted for new clients who sign up for Care or Response after realizing their site has been compromised.

Additionally, we accept malware sample submissions at samples@wordfence.com and have numerous other sources for obtaining new malware samples. If you ever come across a piece of malware that is undetected by Wordfence, please send it in to us so that we can write a signature for it.

In more good news, Wordfence already detects most new and existing malware with our current signature set. However, sometimes new malware cleverly attempts to evade the Wordfence scanner, and our team combats this by writing new detection signatures that are released to Premium, Care, and Response customers in real-time, and released to customers still using the free version of Wordfence after a 30 day delay.