Where credentials are stolen.
WHY IT MATTERS
Your site is only as secure as the machine you administer it from.
WHAT HAPPENS
Malware on your computer captures passwords, including stored FTP credentials.
THE FTP CLIENT PROBLEM
FTP clients store passwords in files that malware specifically looks for.
WHAT TO DO
Keep your operating system updated Use security software Avoid pirated software Be cautious with attachments and downloads
WHAT NOT TO DO
Administer your site from a shared or public computer Store credentials in a browser on a shared machine Connect over untrusted networks without encryption
FOR PHONES
The same applies. Keep them updated.
WHAT TO DO IF YOUR COMPUTER IS COMPROMISED
Assume every credential on it is stolen.
Change them all, from a clean machine.
Including hosting, registrar, email and site administration.
WHAT PEOPLE SKIP
Changing credentials after a computer problem.
That is how sites are compromised repeatedly.
