Knowledgebase

Categories

Articles

Changing Credentials After a Compromise What to change.WHAT TO CHANGEHosting account password Site administrator passwords, all of them... Checking Cron Jobs and Scheduled Tasks Where persistence hides.WHY THIS MATTERSAttackers use scheduled tasks to reinstate themselves... Checking Whether You Have Been Compromised Verification.WHAT TO CHECKYour user list, for accounts you do not recognise Files modified... Cleaning Files Removing malicious code.THE SAFEST APPROACHReplace rather than clean.HOW TO REPLACEDownload fresh... Cleaning the Database Compromises that live in data.WHY CHECK ITSome compromises inject content into the database... Compromises That Hide Themselves Why you might not notice.WHAT ATTACKERS DO TO AVOID DETECTIONShow the compromise only to search... Deciding Whether to Take the Site Offline A judgement call.WHEN TO TAKE IT DOWNIt is redirecting visitors somewhere harmful It is... Finding the Entry Point The step people skip.WHY IT MATTERS MOSTCleaning without closing the entry point means it returns... Getting Search Warnings Removed When your site is flagged.WHAT HAPPENSSearch engines and browsers warn visitors that your site is... How to Clean a Compromised Site The proper process.THE PRINCIPLERemove the compromise and close the entry point.Doing only the... Learning From a Compromise What to take from it.WHAT TO ESTABLISHHow it happened How long it went unnoticed What it cost... Preventing It Happening Again Closing the loop.WHAT TO DO IMMEDIATELYUpdate everything Remove anything unmaintained Remove... Rebuilding Rather Than Cleaning When to start again.WHEN REBUILDING MAKES SENSEThe compromise is extensive You cannot be... Recovering Email Reputation When spam was sent from your account.WHAT HAPPENSA compromised site sends spam.Your server... Recovering From a Hack: Everything That Matters, Briefly The whole category in one page.THE FIRST HOURBack up the compromised state Establish scope Change... Restoring Your Site After Cleaning Getting back to normal.WHAT TO DO IN ORDERVerify the site is clean Remove any maintenance page... Signs Your Site Has Been Compromised What to look for.WHAT VISITORS MIGHT SEERedirects to another site Pages you did not create... Telling Customers About a Compromise Communication.WHEN YOU MUSTCustomer data was accessed Payment information was involved Customers... Verifying the Site Is Clean Confirming the cleanup worked.WHAT TO CHECKRun a malware scan Load the site logged out, from a... What a Cleanup Should Cost Reasonable expectations.WHAT AFFECTS THE COSTSite complexity How long the compromise persisted... When to Ask Your Host for Help What we can do.WHAT WE CAN DOCheck server-side logs Identify whether other accounts are affected... When to Get Professional Help Bringing someone in.WHEN TO CONSIDER ITYou cannot find the entry point The compromise returns...

Back

Are you happy with your experience? Leave us a review on Trustpilot.