Search Blue Canoe

Enter at least two characters.

Incidents

Reports of real incidents: what happened, the available evidence, containment, investigation and recovery. Unresolved questions and later updates are recorded with each report.

  1. Beyond the Fake CAPTCHA: A WordPress ClickFix Incident InvestigationA real-world WordPress compromise involving fake reCAPTCHA/ClickFix delivery, database-resident PHP persistence, passwordless administrator impersonation, hidden SEO tooling, and repeated reinfection.