Take the 2-minute tour ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

I've been facing the exact same injected script on several of my websites for the last few weeks. Today I realize these websites don't share the same hosting servers, yet the attacks (1) started at the same time (2) are identical.

Does this prove that my FTP passwords have been stolen (they're all stored in Filezilla XML file on my hard drive) ? What else could be the security hole?

share|improve this question
add comment

1 Answer 1

up vote 2 down vote accepted

It is likely to be either the FTP passwords or some common software that is powering the sites. For example it is very common for an old version of WordPress to be vulnerable to this type of an attack.

You should:

  • Change your FTP passwords
  • Update all the software powering your sites.

Google just released a set of resources for Webmasters that have been hacked. You may find more information there that is relevant to your situation.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.