homepage Welcome to WebmasterWorld Guest from 54.205.189.156
register, free tools, login, search, pro membership, help, library, announcements, recent posts, open posts,
Become a Pro Member
Home / Forums Index / Code, Content, and Presentation / HTML
Forum Library, Charter, Moderators: incrediBILL

HTML Forum

    
Follow up on Attack Warning Message
from Google's bots in FireFox
SanDiegoPaul




msg:3966373
 8:08 pm on Aug 5, 2009 (gmt 0)

I figured I would create another thread about the browser attack warning. I did not start the other one, and don't want to hijack it.

I contacted my web hosting company this morning. They said the problem is an Iframe on my website. I've never used Iframes so for now, I'm clueless.

------ Response below: --------
Your domain is showing because of the iframe that is embedded in your source code [domainname].cn/
------ End of Response --------

Wow they sure couldn't have been more brief. What is the [domainname]update.cn thing they are talking about?

-Paul
Confused in San Diego

[edited by: tedster at 8:52 pm (utc) on Aug. 5, 2009]
[edit reason] hide the real domain name [/edit]

 

tedster




msg:3966417
 8:57 pm on Aug 5, 2009 (gmt 0)

Because of the specific domain name (which I edited for saftey reasons) you may not have recognized that indeed it IS a domain name with a .cn TLD (China).

I'm surprised your hosting company wasn't more helpful - your server, and THEIR server, has been compromised by a widespread hack that resulted in an "iframe injection" on your web pages. The iframe content might be anything, including hidden links, but in this case it sounds like the iframe source does something malicious.

There's a lot of information about how to deal with this. Clearly you want to upload clean versions of your pages, but you also need to discover and patch the security problem that lead to your server being vulnerable. Otherwise it may well happen again.

SanDiegoPaul




msg:3966454
 9:46 pm on Aug 5, 2009 (gmt 0)

Tedster thanks for that. I didn't realize I was posting a site link -sorry- but I'm wondering just what I can do? It's shared hosting, and they tell me that my site is the only one being reported.

tedster




msg:3966479
 10:24 pm on Aug 5, 2009 (gmt 0)

Change your password, upload a clean version of your pages -- and then maybe find a new web host?

Global Options:
 top home search open messages active posts  
 

Home / Forums Index / Code, Content, and Presentation / HTML
rss feed

All trademarks and copyrights held by respective owners. Member comments are owned by the poster.
Home ¦ Free Tools ¦ Terms of Service ¦ Privacy Policy ¦ Report Problem ¦ About ¦ Library ¦ Newsletter
WebmasterWorld is a Developer Shed Community owned by Jim Boykin.
© Webmaster World 1996-2014 all rights reserved