I have recently been approached following a successful defacement of a clients websites. These sites were not ecommerce related, and they didn’t store any information regarding individuals, customers, staff, etc. They were just examples of ‘normal’ business websites for trying to do business in the 21st Century.
Their websites had been targeted and defaced. When we first arrived we were not sure how it had been compromised or how the compromise was effecting the site, we just knew it had been. The important thing to bear in mind is that you can be bringing the site back online while at the same time keeping the defaced website for investigation.
We were amazed when we couldn’t find any specific details for how to deal with website defacements, so we had to come up with our own best practice. We did found plenty about “deface website” however very little of it was useful for our requirements.
Continue reading →