Blog
Research on real malware, incident guides for hosting servers and notes on how our products work.
Hacking tools: WSO / FilesMan web shell
WSO is the web shell you actually find on a hacked cPanel account. A tour of its file manager, console, bruteforce and back-connect tools, why it hides so well, and how to find it.
Polymorphic PHP Malware: 19 Files, 19 Hashes, One Campaign
A polymorphic PHP malware campaign hid in fake .well-known folders and deleted Wordfence and Sucuri. How it evades scanners, what it does, and how to find it.
How to Find and Clean Malware on a cPanel Server Without Breaking Sites
A practical incident guide for cPanel/WHM administrators: find infected files with standard tools, tell injected code from pure malware, clean without taking sites down, and close the way back in.
Anatomy of a PHP Dropper: Eight Obfuscated Files, One Signature
We took apart a real PHP dropper family from WordPress uploads folders. Eight files with different hashes, no readable function names and no VirusTotal record reduced to one canonical form, and a single signature matched them all.
How to Scan a Server for Malware Without Slowing Down Your Sites
Why malware scans make hosting servers slow, how to measure the real cause, what nice, ionice and CPU quotas actually do, and measured numbers from a scanner built around a hard CPU limit.
Why a Hacked Site Gets Reinfected After You Clean It
You removed the malware and it came back. Real samples show why: injected code that reinstalls deleted files on every page view, payloads that delete themselves, and an entry point nobody closed.
Enabling Two-Factor Authentication (2FA) for root in cPanel/WHM
Learn how to enable Two-Factor Authentication (2FA) for WHM (cPanel) to enhance security, protect sensitive data, and prevent unauthorized access.
Installing Pyxsoft in AlmaLinux 9 with cPanel
Learn how to install Pyxsoft on AlmaLinux 9 with cPanel for enhanced security and malware protection.
Upgrading cPanel from CentOS 7 to AlmaLinux 8 with Pyxsoft WAF
Understanding WAFs and the Power of Pyxsoft
Log4Shell Vulnerability Protection
Brute Force Protection explained
Hacking tools: C99 Shell
