Malware on a Server
Malware on a server is one of the major root causes for security issues: it sends out SPAM, it affects server stability and performance, it breaks websites and causes a lot of issues on servers. Imunify360 can effectively keep your server clean with real-time and background scans, and with the ability to clean up detected malware automatically. The Malware Scanner has an extremely high detection rate and minimal false-positive rate. And it performs a safe cleanup process against malicious files to keep websites up and running.
Excessive Resource Usage on Servers
If you have a server with malware, you were probably facing a problem of high CPU load and excessive disk IO operations caused by running malware, or by frequent HTTP requests performed by bad bots or attackers. Imunify360 is able to dramatically reduce server load by blocking or filtering out malicious requests via its Web Application Firewall component with Real-Time Blacklist (RBL) and a proprietary set of ModSec rules on board. Imunify360 also utilizes a Cloud-Based Security service with AI and heuristics that make it possible to correlate incidents and reveal hundreds of thousands of malicious requests across the Imunify customer base to react proactively against attackers and bad bots. In addition, the Imunify DoS plugin and Imunify PAM module block any attempts to hack a user account by brute-force, or scan server for sensitive data.
Outgoing Mail Spam
Outgoing Mail Spam is another reason to check your server for malware. Imunify360 has a cutting-edge signature- and hash-based malware scanner with automated cleanup. It’s able to detect many types of malicious file or malicious code injections on a server including SPAM scripts that causes excessive outbound mail traffic. It has 3 modes: run-time scan (uploaded and modified files), on-demand scan (to scan any arbitrary folder when needed) and background scan (daily/weekly/monthly, configured by admin). If the scanner is configured for a daily scan with the automated cleanup option enabled, it will keep your server malware-free and the mail queue normal.
WordPress/Joomla/../Drupal Account Compromises
Weak passwords set for CMS accounts are usually a nightmare for admins. Hackers and bad bots can easily guess a password with a few attempts using a special dictionary. Imunify360 offers a full set of security components that protect against account compromise. They are WAF with RBL, which is able to block brute-force attacks almost instantly; WebShield with CAPTCHA and SplashScreen, which reveal the real IP address of attacker behind VPN and proxy, and show a SplashScreen or CAPTCHA challenge to bots. And there will soon be a new component called “Weak Password Login Prevention” that checks for compromised passwords and takes the user to a password reset page as a preventive measure.
FTP/SSH Account Compromises
Another popular source of malware infection is an FTP/SSH account compromise. Imunify360 includes a collection of components to handle that. They are OSSEC with Active Response, the Imunify PAM module to block brute-forcers, and the Imunify DoS plugin to limit the number of requests coming to the server during attacks. Imunify360 notifies the owner of a compromised account that they need to reset a password to fix the issue and prevent reinfection of a server.
Mail Account Compromises
If you have a mail server, you might notice a malicious campaign against Exim+Dovecot. Hackers use brute-force techniques to break into a system by constantly checking mail accounts for weak passwords. Imunify360 is able to block brute-force attacks using its PAM module with RBL. Let your clients know they are safe and their mail accounts are protected.
