Recently our Remediation and Research teams have noticed a new wave of malicious cron jobs associated with the notorious AnonymousFox malware. The cron jobs are purpose-built to reinfect the victim websites and make removal of the infection more cumbersome and time-consuming.

In this post we’ll investigate one of these malicious cron jobs, describe what it does and how you can recognise and remove them on your website.

If you’re currently dealing with such a hack you can check out our extensive AnonymousFox Hack Guide here for help with removing the infection from your environment.

Continue reading New Wave of AnonymousFox Cron Jobs at Sucuri Blog.