Please read this post in full to know security updates for your website and online services. You can protect your web site content from hacking/attacking by following few easy steps outlined below.
We are getting number of support tickets and calls regarding iframe JavaScript Attacks. The number is limited to certain users at this time but issue is repeated again and again with them. We would like to inform all our customers and service users about the precaution measures, before this issue spread in masses.
(*) So, you will ask what the issue is.
Issue is JavaScript Injection Attacks.
(*) What is "JavaScript Injection Attacks" and where I can get more details?
You can learn from F-Secure Security Lab about this issue in depth.
URL: http://www.f-secure.com/weblog/archives/00001502.html
(*) How to protect site from "JavaScript Injection Attacks"?
1. Change your password to hard to guess and do not store it within your FTP Software or in any other file like text file, where is easily accessible.
2. Update permission of your website directories to override write permission.
3. Update your online script/software to latest release as provided by the respective developers. Even a simple JavaScript included in your website can be a case of this attack.
4. Update your PC/Laptop with the latest OS releases to fix the security issues.
5. Update regularly your anti-virus software and scan your PC.
(*) Where can I learn more about it?
Please visit following URL's
http://www.asp.net/LEARN/mvc/tutorial-06-vb.aspx
http://badwarebusters.org/main/itemview/4360
And you can also search Google for this term to learn more about the issue.
Please note, the issue is not related to virus on server or any security issue in server. All our Linux and Windows servers are protected with licensed anti-virus softwares and are applied with control panel updates on daily basis and Operating System updates as and when available by their Manufacturers.
It is your responsibility to protect your website content by following above steps and security measures outlined by script and software developers you are using online or offline.
If you have any question, please feel free to contact us at support@dinsol.in
Thank you!
Tuesday, October 27, 2009