Archive for March, 2007

My Homepage is Hacked

Wednesday, March 14th, 2007

This week, my home page was hacked through an iframe javascript injection. Now, Google displays a warning note in its SERP pages just below the site title.

It is frustrating for surfers to be exposed to malware while surfing. They should be protected against such malicious acts to the greatest extent possible, and by any means available, including warning notices by search engines. But it is equally frustrating for victimized webmasters, like me, to see that that the image of their sites is damaged due to actions to which they are not a part, although they take every measure and correct the situation immediately after they become aware of the situation. This is a double damage indeed: one caused by the cyber-vandals, and one by the search engines.

At the moment I realized this, I promptly started to examine pages at turktrans.net, and discovered that an obscufated javascript code is inserted at the beginning of index page. When decoded to ASCII, it revealed an iframe javascript that attempts to download a malware into the user’s computer. I immediately removed the javascript code to protect my visitors, and changed passwords as the first measure. Then, I contacted StopBadware.org  to review my site. An automatic reply says that it will take at least 10 days to review. I hope that this will not take longer, and that they notify google to remove the warning note.

Although Google says that they notify webmasters of any such badware here, I did not receive any notification. As an affected webmaster, I hold the opinion that I should be warned by Google. This way, I would act earlier, and thus prevent numerous visitors from being exposed to malware. Having cleared my affected page, I am anxiously waiting for Google to remove the warning note hoping that this will not last long, and that the reputation, and credibility of my site will not be damaged beyond repair.