Remove Zuponcic


Zuponcic

Vulnerable computer systems and applications:

Websites and their content management systems (CMS).

Description:

The malicious code (embedded in the .htaccess file) responds only to certain User-agent fields and only to those site visitors who come from commonly known sites, such as Google, Facebook, Yahoo, LinkedIn, etc. For this reason, some anti-virus programs do not detect anything suspicious. Users accessing infected websites get redirected to malicious pages, where malware is lurking.

Recommendations:

In case of breach:

  • Remove malicious code in the .htaccess file;
  • Update CMS;
  • Change administrative passwords.

 

Prevention:

  • Make web content management systems (CMS) accessible only from an internal corporate network or from established IP addresses;
  • If you use an open-source CMS, keep them up to date;
  • Do not use unnecessary CMS plugins;
  • Periodically change passwords for administrators and those users who have access to the CMS;
  • Search for vulnerabilities.