Yesterday, the Watchful team identified a security vulnerability in a moderately popular and free Joomla add-on, the YouTube Joomla Plugin.

This plugin made it easy to embed YouTube videos in Joomla articles.

Unfortunately, the installation files available from the official plugin website included a malicious script or backdoor. The details on how this happened or who was responsible for inserting the backdoor into the installer are not yet clear.

This vulnerabilty is known to exist in the wild and although dangerous, appears to be have used primarily to insert backlinks into unsuspecting websites sites when crawled by specific search engines as you can see in this decoded sample.

How did you find this?

Finding software vulnerabilities and preventing further damage is a group effort in the Joomla community. 

Much credit goes to the following people who helped find this exploit and limit the damage:

  • Chad Windnagle (@drmmr763) for snooping out the clues.
  • Watchful's own Jeff Channel (@jeffchannell) for finding the exploit.
  • Phil Taylor (@blueflameit) for reporting the backdoor to the company hosting the website (the site was taken offline very quickly).
  • Ronni Christiansen (@redwebdk) and Tessa Merro (@TessaMero) for working together to remove the plugin from the Joomla Extensions Directory. 

Read more...

watchful March wallpaper

Our latest desktop wallpaper is now available.

Read more...

Watchful now supports JCE MediaBox updates

If you are like most Joomla users, you use JCE for editing your content as well as the JCE MediaBox plugin for embedding your images, galleries, videos and other media. 

Today — exactly 1 year after announcing update support for a suite of JCE software titles — we are thrilled to announce that Watchful now supports remote updates for MediaBox.

As a free extension, all JCE users can take advantage of these updates immediately.

Watchful now supports ZOO updates

Today we are thrilled to announce that Watchful now supports remote updates for ZOO, the popular Joomla application builder from YooTheme.

Watchers using the free version of ZOO can update immediately.

Pro users with a paid ZOO subsciptions must first add the relevant download IDs from their YooTheme account to their Watchful Profile.

watchful-report-overview

Many Watchers have been taking advantage of our CSV and PDF export options that have long been available when viewing the Logs area of the Watchful.

We’ve been carefully adding more options for data export, and three of these options are now live all users.

When viewing a site detail view, the Google Analytics, Uptime and Logs tabs now all have a PDF button that can be used to export those views.

Read more...

February watchful wallpaper

Our latest desktop wallpaper is now available.

Read more...

Watchful now supports JCH Optimize Pro updates

Today we are thrilled to announce that Watchful client — version 1.10.2 — now supports remote updates for some popular  Joomla extensions.

Read more...

autocomplete passowrd

If you browse the web with Chrome — the excellent web browser from Google — the autocomplete feature probably saves you lots of time with passwords and repetitive text entry.

But if you're a developer, or use any number of web services, very likely you find the autocomplete feature more troublesome than not.

As we'll describe below, the cause of this frustration is due to a fairly recent change by Chrome developers to ignore the autocomplete="off".

Read more...

watchful wallpaper Januray 2015 

Our latest desktop wallpaper is now available.

You can download the appropriate size for your screen below.

    1. Square 75 (75 x 75)
      Square 150 (150 x 150)
    2. Thumbnail (100 x 56)
    3. Small 240 (240 x 135)
    1. Small 320 (320 x 180)
    2. Medium 500 (500 x 281)
    3. Medium 640 (640 x 360)
    4. Medium 800 (800 x 450)
    1. Large 1024 (1024 x 576)
    2. Large 1600 (1600 x 900)
    3. Large 2048 (2048 x 1152)
    4. Original (2560 x 1440)

watchful wallpaper December 2014 

Our latest desktop wallpaper is now available. You can download the appropriate size for your screen below.

    1. Square 75 (75 x 75)
      Square 150 (150 x 150)
    2. Thumbnail (100 x 56)
    3. Small 240 (240 x 135)
    1. Small 320 (320 x 180)
    2. Medium 500 (500 x 281)
    3. Medium 640 (640 x 360)
    4. Medium 800 (800 x 450)
    1. Large 1024 (1024 x 576)
    2. Large 1600 (1600 x 900)
    3. Large 2048 (2048 x 1152)
    4. Original (2560 x 1440)

More time. More happiness.