Website Security site recently hacked project starts today

[url removed, login to view] was recently hacked and needs to increase security. Experienced only and available to start immediately. Recommendations need to be made and checked after implemented to prevent further breaches.

Message from Host:

It appears that an FTP password for your Alliedlocksafe server was compromised. This has allowed an attacker to upload malicious content. We respectfully request, at your earliest convenience, that you perform the following actions:

1) Review your content to ensure that it does not contain the malicious code.

2) Update anti-virus definitions and scan for viruses.

3) Update FTP passwords using strong password practices.

4) Remove the malicious code from the files or (preferably) remove site content and re-upload clean versions of the files.

5) Update any database passwords and connection strings.

Please keep in mind that you need to use secure passwords. A secure password contains: 7-14 characters in length, upper case letters, lower case letters, symbols, and numbers. This password also should not be based off of any words that can be found in a dictionary or contain your user name. Please refer to the following article for more assistance on generating a secure password: [url removed, login to view]

FTP logs showing access from non-customer IP:

Mon Dec 14

07:28:29 2009 0 [url removed, login to view] 7440

/var/www/vhosts/[url removed, login to view] b _ o r

alliedlocksafe ftp 0 * c

Mon Dec 14 07:28:31 2009 0 [url removed, login to view]

7553 /var/www/vhosts/[url removed, login to view] b _ i r

alliedlocksafe ftp 0 * c

Mon Dec 14 07:28:39 2009 0 [url removed, login to view]

6958 /var/www/vhosts/[url removed, login to view] b _ o

r alliedlocksafe ftp 0 * c

Mon Dec 14 07:28:41 2009 0 [url removed, login to view]

7071 /var/www/vhosts/[url removed, login to view] b _ i

r alliedlocksafe ftp 0 * c

Mon Dec 14 07:28:47 2009 0 [url removed, login to view]

7551 /var/www/vhosts/[url removed, login to view] b _ o r

alliedlocksafe ftp 0 * c

Web Security

Project ID: #571800

About the project