I think you need to have a word with Sucuri

@reidbusi

Thank you.

We’ve received a number of reports about this and we’re investigating.

We have reached out to Sucuri to find out why they did not add any explanation that the fake plugin is in no way related to the real plugin, and why they are deleting user comments that mention the real plugin.

If there is any kind of negativity on their end, it would be news to us.

– Scott

@ddsucurinet: Perhaps you can provide some insight into this?

UPDATE:

We published a blog post about the fake plugin:
Malware Alert: Beware of Fake Plugin X-WP-SPAM-SHIELD-PRO

Bleeping Computer covered it as well:
Hacker Hides Backdoor Inside Fake WordPress Security Plugin

@reidbusi

Sucuri responded with a friendly email, and updated the article to clarify that they were unrelated. Seems like it was just an oversight.