Cyber Monday Sale! 50% Off All Access

How to Fend Off a New Kind of Cyber Attack Hackers can use malware that redirects customers to malicious websites when they visit yours. Here's how to defend your site in an attack.

By Mikal E. Belicove

Opinions expressed by Entrepreneur contributors are their own.

How to Fend off a Cyber AttackWelcome to your worst nightmare online. That business website you so painstakingly created, nurtured and made successful has just been poisoned in a nasty cyber attack. Known as Mass Meshing Injection, this type of attack attempts to overpower security measures aimed at detecting a previous type of cyber attack called Mass SQL Injection. Since the beginning of June, it's affected thousands of business websites worldwide.

"In Mass SQL Injections, scripts or iframes are injected into innocent victim sites that cause the browser to load malicious content from the 'redirectors,' which are domains registered by the attacker," Wayne Huang, chief technology officer at Armorize, wrote last week on the Web security firm's Malware Blog.


"To defeat this," Huang continues, "Mass Injection does the following: Every infected website contains a redirector script in the root directory; in this case it is example.js. This is an obfuscated script that will dynamically generate an iframe to the exploit server. It runs the BlackHole exploit and serves drive-by downloads."

As a result, Huang writes, "Every infected website is injected, in their pages, with a script src tag pointing to another random infected website's example.js."

If all of that sounds like mumbo-jumbo, here's a translation: In a mass-meshing attack, hackers implant scripts in websites that redirect a visitor's computer to Web servers that, in turn, inject them with infected programs. Worse yet, an infected site has the very real potential of being blacklisted by Google and security vendors.

So how do you know if your site has been hacked, and if it has, how do you restore it and your reputation when Google or their antivirus software tells customers your site poses a risk? Regina Smola is founder and CEO of WP Security Lock, a Davis Junction, Ill.,-based firm that provides malware prevention and removal services for small and medium-size business. Smola says the best indication that your website has been hacked is when you are redirected to another site when you open your webpage.

"If you attempt to go directly to your website -- or to get to your site from a search engine link -- and you're referred elsewhere, this is a strong indication that your site may have been infected with malware," says Smola. "If this happens, close the web page immediately and run a full malware scan on your website." Smola recommends using a service like Sucuri Web Integrity Monitoring, which lets you know if malware is found on your website.

Even if you suspect your business website has fallen victim to a Mass SQL or Mass Meshing Injection, the best outcome is derived by immediately contacting everyone on your Web and IT teams, including your Web-hosting provider. Then outline a plan of attack of your own. And since infected websites ultimately infect your local computers, be sure to scan -- and if necessary, repair -- your computers before changing any of your administrative passwords. The reason is if your PC is infected, the bad guys could easily gain access to your new passwords, also.

Has your business' site been attacked by malware? Let us know how you handled it in the comments section.

Mikal E. Belicove is a market positioning, social media, and management consultant specializing in website usability and business blogging. His latest book, The Complete Idiot’s Guide to Facebook, is now available at bookstores. 

Want to be an Entrepreneur Leadership Network contributor? Apply now to join.

Growing a Business

Her Restaurant Business Is Worth $100 Million — Here's Her Unconventional Advice for Aspiring Entrepreneurs

Pinky Cole, founder of Slutty Vegan, talks about going from TV producer to restaurant owner, leaning into failure and the value of good PR.

Business News

Elon Musk Still Isn't Getting His Historically High Pay as CEO of Tesla — Here's Why

A second shareholder vote wasn't enough to convince Delaware judge Kathaleen McCormick.

Legal

How Do You Stop Porch Pirates From Stealing Christmas? These Top Tips Will Help Secure Your Deliveries.

Over 100 million packages were stolen last year. Here are top tips to make sure your stuff doesn't get swiped.

Leadership

Leadership vs. Management: How to Understand the Difference and 6 Ways to Bridge the Gap

Here are the key differences between leadership and management, highlighting their complementary roles and providing six strategies to develop managers into future leaders.

Business News

'Something Previously Impossible': New AI Makes 3D Worlds Out of a Single Image

The new technology allows viewers to explore two-dimensional images in 3D.

Business News

'I Stand By My Decisions': A CEO Is Going Viral For Firing Almost All of the Company's Employees — Here's Why

The Musicians Club CEO Baldvin Oddsson fired 99 workers at once over Slack for missing a morning meeting. But there's a catch.