Security Issues and How to Manage Them

There are certain types of security issues that may be dangerous to your account and/or the entire server. An example of a security issue that harms other people, and web hosting, is Phishing. Phishing is a fake page used by hackers to steal other people’s sensitive information such as credit card information, login details to a web service, or email. Phishing pages are usually uploaded to a victim’s website using stolen access details or through security holes in web scripts.

Another possible issue is Spam, which may be sent through the mail server by using a compromised password or through web script, which was uploaded by a hacker to your site using stolen passwords or through other scripts security holes.

How to resolve?

Normally, after our Security team have detected malicious content, they delete it from the account. From your side it is required that you perform steps that will not allow re-occurring of this problem again in future.

How to prevent?

- Keep all scripts (Blogs, shopping carts, CMS applications etc.) and all their plugins updated to latest versions
- Keep all passwords strong and updated regularly
- Keep local computers that are used to access to site, hosting admin area, and FTP regularly scanned for viruses and trojans.
- Add your domain to google webmaster tools.
- Enter Google.com in browser
- Enter in search field Webmaster tools and reach the first link in result
- From the right menu enter your Gmail mailbox and password and sign in
- From the right side click on red button “ADD A SITE”
- Enter URL of your site i.e yourwebsiteurl.com
- From instruction download verification file, it will be like googlef9834dec90c44dd.htm
- Upload the file from your computer in the root of domain folder, so it should lying in /yourwebsiteurl.com/googlef9834dec90c44dd.htm
- Then reach uploaded file trough browser http://yourwebsiteurl.com/googlef9834dec90c44dd.htm
- Click “Verify” button in Webmaster tools page
- After please visit this link and request to review your site within Google network http://www.google.com/support/webmasters/bin/answer.py?answer=45432

Useful links:

http://wepawet.iseclab.org/ – site to analyze web-based threats

http://sitecheck.sucuri.net/ – website malware and security scanner

 

Was this article helpful?

Yes (3)
No (1)

We're sorry you didn't find this article very helpful. Please help us improve it by leaving your feedback below.

Error