How to react correct?
If your websites have been hacked, you should react as fast as possible.
In many cases foreign sourcecode, worms or trojans are introduced, which spread automatically over your website. Furthermoer many websites don´t work anymore as they should, if they have been infected, because JavaScript errors occure, the load time of the pages is very high or the websites don´t open anymore.
In many cases it is necessary to restore a backup - in some cases it is adequate to change some files. If you are customer of us and our HackAlarm-service has detected a possible attack to your website, you will be informed automatically with an email and/or SMS about the situation. Inside this email you find already important instructions and tipps for recovering. If you want, we can also overtake the whole recovery work after an attack.
Furthermore you should immediately care about the security hole which permitted the hack attack. So check the logfiles of your webserver and inform your provider as fast as possible.
Checklist for the emergency-case
- Alert: Inform your webmaster and Provider
- Safe evidence: Make a backup of the hacked files and logfiles
- Recovery: Introduce procedures (z.B. restoring of backups)
- Secure for further intrusions: Find the security hole(s) in your scripts
- Analyze: Send the hacked files to HackAlarm24
- Identifiy: Seek for the hackers
- Complaint: Abandon a complaint at your next police office
We are always available for your questions.
Your team of HackAlarm24! |
