How to fight a malware injection?
Last week I found a malware code in my homepage. The code, using hidden iframes, would direct unknowingly visitors to a webpage that installs a Trojan in the computer. Luckily, I was able to detect that malicious code early thanks to a warning message from GOOGLE. I advice all of you to do the following to protect your websites/blogs from such attacks:
- Never store Passwords in FTP programs like CoreFTP or FileZilla. Some Trojans look for and steal passwords stored in your computer and they will use them to access your server and modify the files.
- Use more secured and encrypted transfer protocol such as SFTP or SSH to upload files. FTP is weak security wise since it is not encrypted and anyone can sniff the data you are sending/receiving.
- If you discover a malware code in one of your webpages, remove the page immediately, scan your computer for any Trojans, and change your server account settings. Only then upload a backup copy of the infected webpage. These are important steps to ensure, to some level, that the code injection won’t happen again.
- Finally, always keep a fresh copy of your website, you will never know what’s going to happen.


I’m still working on the blog. I have great plans to make the blog an active section of my website in which I could share information about web development, IT and life in general.