How to fight a malware injection?

Last week I found a malware code in my homepage. The code, using hidden iframes, would direct unknowingly visitors to a webpage that installs a Trojan in the computer.  Luckily, I was able to detect that malicious code early thanks to a warning message from GOOGLE. I advice all of you to do the following to protect your websites/blogs from such attacks:

  • Never store Passwords in FTP programs like CoreFTP or FileZilla. Some Trojans look for and steal passwords stored in your computer and they will use them to access your server and modify the files.
  • Use more secured and encrypted transfer protocol such as SFTP or SSH to upload files. FTP is weak security wise since it is not encrypted and anyone can sniff the data you are sending/receiving.
  • If you discover a malware code in one of your webpages, remove the page immediately, scan your computer for any Trojans, and change your server account settings. Only then upload a backup copy of the infected webpage. These are important steps to ensure, to some level, that the code injection won’t happen again.
  • Finally, always keep a fresh copy of your website, you will never know what’s going to happen.

The New Portfolio Website is Up and Running!

site-preview

Finally the new website is up and running. It still needs some work, but it is almost there. I’m quite happy with the new style and look. ;)

Stay tuned!!

under_20construction_smallI’m still working on the blog. I have great plans to make the blog an active section of my website in which I could share information about web development, IT and life in general.

Happy Eid Everyone

Best wishes to all muslims for Eid Al fitr Al Mubarak. May Allah return it while we are blessed with health and well being.

Moved to a new house

Now am nearer to the public transport. Even though the place is a bit smaller than the old apartment, it is quite convenient transportation wise.