Projects

Real incident

WordPress incident response

A small healthcare practice’s website was quietly serving spam. I traced the break-in to one admin login and tracked down what the attacker left behind.

malicious files
23
command-and-control domains
7
ways the code hid itself
4
of traffic lost to spam pages
85%

More projects