Malware

TL;DR

Matt Cutts explains Google's tools for malware detection and site recovery.

Transcript

MATT CUTTS: OK. We've got a neat, interesting topic today. Although, if you're watching this video, you're probably angry and frustrated, and I'll apologize in advance for that. Today, we want to talk about malware and hacked sites. You would not believe how common it is. I don't mind telling you that Donald Trump has had a website hacked. Al Gore ... Read More

Key Insights

• Malware infections are common, affecting even high-profile figures like Donald Trump and Al Gore. It is crucial to prevent showing malware to users.
• Google offers a Safe Browsing Diagnostic Page to check if a URL is infected with malware, providing detailed statistics and infection status.
• Site owners should register their sites with Google's Webmaster Tools to request a malware review after cleaning up infected content.
• Fetch as Googlebot allows site owners to see what Googlebot sees, helping identify hidden malware that might not be visible in the source code.
• Common malware entry points include HT access files and SQL injection vulnerabilities. Site owners should ensure their systems are up-to-date to prevent such attacks.
• Strong, random passwords are essential for site security. Weak passwords like '123456' or 'password' should be avoided.
• Unmaskparasites.com is a valuable resource for understanding current malware attacks and trends.
• Google is committed to protecting users from malware, offering several tools to help webmasters clean up infected sites and prevent future attacks.

Questions & Answers

Q: What is the Safe Browsing Diagnostic Page?

The Safe Browsing Diagnostic Page is a tool provided by Google that allows users to enter a specific URL to check if it is infected with malware. It provides detailed statistics and information on the malware status of the domain, helping site owners identify and address security issues.

Q: How can site owners request a malware review from Google?

Site owners can request a malware review by registering their site with Google's Webmaster Tools. After cleaning the site, they can access the diagnostics page and click on the malware tab to request a review. This process helps ensure the site is scanned and cleared of malware relatively quickly.

Q: What is Fetch as Googlebot and how is it useful?

Fetch as Googlebot is a feature in Google's Webmaster Tools that allows site owners to see what Googlebot sees when it accesses a page. This tool is useful for identifying hidden malware that may not be visible in the source code, as it shows the exact content returned to Googlebot, including any redirects or malicious content.

Q: What are common vulnerabilities that lead to malware infections?

Common vulnerabilities include HT access files and SQL injection. These can be exploited if URL parameters are not properly sanitized, allowing attackers to inject malicious code. Keeping systems updated and ensuring proper security measures are in place can help prevent these vulnerabilities from being exploited.

Q: Why is it important to use strong passwords for site security?

Strong passwords are essential for site security because weak passwords can be easily guessed or cracked by attackers. Using random, complex passwords significantly reduces the risk of unauthorized access and helps protect the site from being hacked or infected with malware.

Q: What is unmaskparasites.com and how can it help site owners?

Unmaskparasites.com is a website that provides information on current malware attacks and trends. It is a useful resource for site owners to understand the various types of malware threats and learn about effective strategies for protecting their sites from infections.

Q: How does Google assist in protecting users from malware?

Google is committed to protecting users from malware by providing tools like the Safe Browsing Diagnostic Page, malware review requests, and Fetch as Googlebot. These tools help webmasters identify and clean up infected sites, ensuring a safer browsing experience for users.

Q: What should site owners do if they suspect their site has been hacked?

If site owners suspect their site has been hacked, they should first check for malware using Google's tools, such as the Safe Browsing Diagnostic Page. They should then clean up any infected content, update their systems, and change passwords to prevent further attacks. Requesting a malware review through Google's Webmaster Tools can help ensure the site is thoroughly scanned and cleared.

Summary & Key Takeaways

• Matt Cutts discusses the prevalence of malware and hacked sites, emphasizing the importance of preventing malware exposure to users. He introduces Google's Safe Browsing Diagnostic Page, which helps identify infected URLs and provides detailed statistics on malware presence.

• Site owners are encouraged to register with Google's Webmaster Tools to request a malware review after cleaning their sites. The Fetch as Googlebot tool allows owners to see what Googlebot sees, helping identify hidden malware.

• Common vulnerabilities include HT access files and SQL injection. Keeping systems updated and using strong passwords are crucial for security. Google offers several tools and resources to assist webmasters in cleaning and securing their sites.