How does cleanup work?
Website cleanup mixes both manual and automated processes. The automated elements are quite restricted, which is why every cleanup is handled by a malware analyst whose responsibility it is to look through the results, identify anomalies and clean manually as required. We include an analyst with every cleanup with no extra charge because we want to insure the process runs as smoothly as possible the first time.
Yes – cleanup is included in every plan!
What do you clean?
As malware evolves, so will our service. Under the current cleanups we include remediation for the following:
-
Obfuscated JavaScript injections
JavaScript Obfuscation is a malicious code present on fraudulent websites or illegally injected on legitimate but hacked websites without the knowledge of the administrator. The intention behind these code injections is to detect and exploit vulnerabilities on applications installed on your computer to install malicious and unwanted software that compromise the security of all data on the affected PC….
Read More -
Cross-Site Scripting (XSS)
Cross-Site Scripting (XSS) attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted web sites. XSS attacks occur when an attacker uses a web application to send malicious code, generally in the form of a browser side script, to a different end user….
Read More -
Website Defacements
The term “website defacement” refers to any unauthorized changes made to the appearance of either a single webpage, or an entire site. In some cases, a website is completely taken down and replaced by something new. In other instances, a hacker may inject code in order to add images, popups, or text to a page that were not previously present….
Read More -
Hidden & Malicious iFrames
Clickjacking (also known as user-interface or UI redressing and >Hidden & Malicious iFrames overlay) is an exploit in which malicious coding is hidden beneath apparently legitimate buttons or other clickable content on a website…..
Read More -
Phishing Attempts
Phishing email messages, websites, and phone calls are designed to steal money. Cyber criminals can do this by installing malicious software on your computer or stealing personal information off of your computer….
Read More -
Backdoors
A backdoor trojan differs from a trojan in that it also opens a backdoor to your system. They’re also sometimes call Remote Access Trojans (RAT). These are the most widespread and also the most dangerous type of trojan…
Read More -
Code Anomalies
Acode anomalies on architectural decompositions. In order to detect these code anomalies specific detection strategies were used on the basis of previous studies. In some detection strategies we had used symbolic constants in the place of thresholds (e.g. LOW and HIGH). The choice of these values is derive from general evidence-based guidelines for selecting thresholds and it could be obviously adapted according to application-specific contexts and the designer’s experience..
Read More -
Java Drive by
A Java Drive-By is a Java Applet that is coded in Java and is put on a website. Once you click “Run” on the pop-up, it will download a program off the internet. This program can be a virus or even a simple downloader. If you’d like to get the source code or wanna know more information about a Java Drive-By…
Read More -
Social Engineering Attacks
The various psychological mechanisms that are at work in social engineering attacks social engineers use to manipulate users into cooperating with their schemes. Human based attacks focus on misleading people in person or over the phone and often use impersonation to trick users into releasing information. Computer based attacks still target the human users of computer systems, but do so via computer based techniques such as email scams, email attachments, websites, instant messaging, etc…
Read More -
Stupid, Pointless, Annoying Messages (SPAM)
Spam can be not only annoying but also dangerous to consumers. What that means for you as an email marketer is that the safety precautions that email service providers have put in place to control the amount of spam that makes it into a user’s inbox may actually work against your perfectly legitimate and requested email to your subscribers….
Read More -
SQL Injection
A SQL injection attack consists of insertion or “injection” of a SQL query via the input data from the client to the application. A successful SQL injection exploit can read sensitive data from the database, modify database data (Insert/Update/Delete), execute administration operations on the database (such as shutdown the DBMS), recover the content of a given file present on the DBMS file system and in some cases issue commands to the operating system…
Read More -
IP Cloaking
A website that uses cloaking recognizes search engine spiders by their IP address. It returns web pages to search engine spiders that are different from the web pages that web surfers see. Usually, the cloaking software creates hundreds of web pages that are optimized for a special search term so that search engine spiders get the impression that the website contains a lot of relevant information about a special topic….
Read More
How do you clean?
In most instances our cleanups are conducted remotely, preferably using SFTP, but also HTTP and FTP. Because of the challenges with HTTP, specifically time-outs and other connection issues, we may request secure shell (SSH) access. Once we have access to your server we load tools that allow us to authenticate with the mothership. This connection allows us to traverse your server files and databases.
How am I notified?
The internal ticket system uses the same notification options set in the alerting section. When a ticket is updated you are notified via email, you must log in to the system and update the ticket.
It’s not automated?
The clean up process needs to be initiated and requested via the “Malware Removal Request” form on our system. Here is why:
- We require access to your server in order to perform the remediation process.
- We do not offer services as a ‘Password Manager’ so we do not create or reset existing passwords.
- After every cleanup the first change we ask you to make is to update every password you have (i.,e., administrator page, database, FTP, SFTP, SSH, etc.. )
- We prefer to have a trained malware analyst working with each client.