iframe injection attack HOME
HOME › Articles

Visiting this site may harm your computer - Google warning

If your website has been hacked it may contain malicious software in the background, or an invisible iFrame which loads up malicious content from a more distant website through the invisible iFrame.

Your website may now install malicious software in the background or try to surreptitiously install malicious software such as Trojans or viruses on visitors' computers. This software invariably damages their computer, performs actions without their permission, steals their sensitive data, or propagates itself through their computer to other sites.

When Googlebot visits and spiders your site and finds evidence of this, Google will flag search results with the message: "This site may harm your computer".

The direct link to your URL listed in Google's search results will redirect to an interstitial page labeled: "Warning - visiting this web site may harm your computer!" followed by two suggestions, both of which encourage you to do something other than visit the site you wanted...

Google warning - visiting this web site may harm your computer

As you can imagine, this kills your traffic dead. It's not just smaller sites either, I have seen huge sites getting hit with this and suffering massive drops in traffic.

Google provides the warning to protect you against visiting websites that could harm your computer. They maintain a list of such sites, which they update periodically.

Personally, I think Google is doing a really good thing here - helping site owners discover more quickly that they've been hacked, and reducing the spread of malicious software. It has become the front line in the war against website hackers.

If your site has been infected, you must...

  1. Remove any malware from your computer,
  2. Remove the malicious software from your website,
  3. Ask Google to remove the warning "This site may harm your computer", and
  4. Implement steps to make sure you are not reinfected.

And yes, I know it's easier said than done!

» How to remove a malicious iFrame injection attack from your WordPress blog

HOME › Articles