Follow up on Attack Warning Message

from Google's bots in FireFox

[SanDiegoPaul]

I figured I would create another thread about the browser attack warning. I did not start the other one, and don't want to hijack it.

I contacted my web hosting company this morning. They said the problem is an Iframe on my website. I've never used Iframes so for now, I'm clueless.

------ Response below: --------
Your domain is showing because of the iframe that is embedded in your source code [domainname].cn/
------ End of Response --------

Wow they sure couldn't have been more brief. What is the [domainname]update.cn thing they are talking about?

-Paul
Confused in San Diego

[edited by: tedster at 8:52 pm (utc) on Aug. 5, 2009]
[edit reason] hide the real domain name [/edit]

[tedster]

Because of the specific domain name (which I edited for saftey reasons) you may not have recognized that indeed it IS a domain name with a .cn TLD (China).

I'm surprised your hosting company wasn't more helpful - your server, and THEIR server, has been compromised by a widespread hack that resulted in an "iframe injection" on your web pages. The iframe content might be anything, including hidden links, but in this case it sounds like the iframe source does something malicious.

There's a lot of information about how to deal with this. Clearly you want to upload clean versions of your pages, but you also need to discover and patch the security problem that lead to your server being vulnerable. Otherwise it may well happen again.

[SanDiegoPaul]

Tedster thanks for that. I didn't realize I was posting a site link -sorry- but I'm wondering just what I can do? It's shared hosting, and they tell me that my site is the only one being reported.

[tedster]

Change your password, upload a clean version of your pages -- and then maybe find a new web host?