Each day, Google identifies 9,500 malware-infected websites, about 4,000 of which are legitimate sites compromised by hackers. About half of these victims learn they’ve been hacked when they see the same browser and search-engine danger warnings their customers see, a sign they’ve been blacklisted.
Hackers are constantly breaking into innocent websites and using them to infect visitors with malware, lure them to dodgy sites and infiltrate databases to grab sensitive customer information. But you can avoid trouble or eliminate it quickly by taking some relatively simple steps.
Small businesses are especially vulnerable to hacking because they usually lack the technology expertise and site security that larger companies have. They also suffer more if their lack of expertise slows repairs and their ability to get back to work. Business owners can lose significant online traffic and sales if their site lands on blacklists operated by Google and other search engines.
A lot of people will have to tangle with [a hack] at some point in time, my advice for companies is secure everything.Here’s how to get started:
Keep your software up to date.
Hackers aggressively target security flaws in popular Web software such as content management systems and blogging programs so they can attack websites en masse. Stay out of the line of fire by using the latest versions of software and applying security patches promptly.
Sites that get infected and clean up, but don’t fix the vulnerability in their software, just get re-infected,” says Lucas Ballard, a software engineer with Google’s Safe Browsing team. He urges webmasters to address the underlying weakness that enabled the hack, as well as remove hackers’ malicious code from site pages.
Use strong passwords and keep them safe.
Using strong passwords is crucial because hackers frequently attempt to crack or steal passwords for web software and FTP servers, which are computers that use the File Transfer Protocol to move web pages and other files to another computer, such as a Web-hosting server. Default, common or predicable passwords can be easily broken.
Also make sure to protect your PCs from a virus infection since that can lead to the theft of site passwords. An infection in a computer can allow hackers to steal your FTP password and plant malware that infects visitors to your sites.
Register with Google’s Webmaster Tools.
Getting on Google’s blacklist, which is used by the search site and the Chrome, Firefox and Safari browsers, can reduce traffic to your site. By registering with Webmaster Tools, you can receive notifications of malware infections immediately, sometimes before blacklisting occurs, so you can get rid of them faster. The service also provides details about the precise problem Google is seeing. That can speed your clean up and your return to Google’s good books.
Get expert help.
Companies that are heavily dependent on their websites may want to hire a firm that provides alerts if they get on a blacklist, monitoring for malicious activity, scanning for security vulnerabilities or help with repairs after a hack. Businesses that have databases with sensitive customer information connected to their sites should get help building security into their sites and scouring software code for bugs.
Information from Entrepreneur.com was used in this post.
