How Bad Is It If Users Get Hit with Malware from Your Website?

8 replies
If you have a popular website, that can be good for business, but it also attracts the attention of hackers and all sorts of unsavory people.

And, no matter how careful you are and no matter how security conscious you may be, if someone is really determined to crack your site, they will probably find a way to do it.

If they do so and manage to put up some kind of malware that will download itself to people's computers, how bad do you think that will be for your business?

If your system became compromised because you visited a site, how likely are you to visit that site again?

Even when you hear it's all clear, wouldn't you still be hesitant about going back?

Sure, if the site was a really big site, such as Facebook for example, you might venture back. You have lots of connections there you don't want to miss out on and if lots of other people are saying it's okay now, you may be more likely to return.

But, if it's a site not quite as large as Facebook--and who among us has a site on that level?--how likely are you to go back? You'll probably find a way to live without it, right?

And, even if you decide, well, it's okay now, I'll go back, how many other people are simply going to say, nah, forget about it?

I suggest there is a difference between getting hit with malware and just hearing a site had been compromised. Hearing it may have been compromised can be scary, and you'll probably stay away until you hear it's all clear. But, if you visit a site having had no such warning and get hit with malware, I would bet you're highly likely not to return to that site even once you hear it's all clear.

It's one thing if other people have problems, but once something messes with your own computer system, once you've spent who knows how much time getting your system back in the condition it was before you visited that website, you might just decide you can live without going to that website again.

So, given the potential severity of the situation, if your site became infected with malware, what would you want people to do? Do you want them to send you a message telling you about it, and, in the meantime, let people risk being infected with who-knows-what from your site? What if you're too busy to see the message right away?

Or, would it be better for that person to warn others, so they don't have their own systems compromised? It may look bad for you if someone is going around saying your site may be infected with malware, but wouldn't it look worse for you if people are getting their systems compromised because of visiting your site?

Which has the worst repercussions for your website and your business?

If you value your customers, wouldn't you want them to avoid being struck with malware, especially from your own site?

Or, do you want to be notified first, and not be concerned about what happens to your customers in the meantime?

If it happened to your website, what would you want people to do?
#bad #hit #malware #users #website
  • Profile picture of the author cashcow
    I would want people to tell me so I could take care of it right away.

    I actually did have this happen to one of my sites (yes it was a wordpress site). Didnt seem to have any effect on the traffic but I dont think it got a lot of repeat visitors anyway. I hope no one had anything bad happen to their computers because of it.....

    Lee
    Signature
    Gone Fishing
    {{ DiscussionBoard.errors[4939617].message }}
  • Profile picture of the author Cru
    I would imagine that it would be hard to trace it back to your site for someone who had malware downloaded onto their system. Let's assume it was traced back to your site, I think you need to be responsible and be open and honest.

    I would take the site down notifying people of the reason on a temporary landing page as well as instructions on how to remove said firmware. Once your site was clean I would put it back up with an apology. Transparency is your best friend in a situation like this both from a customer perspective and a legal one.
    {{ DiscussionBoard.errors[4939634].message }}
  • Profile picture of the author tpw
    Originally Posted by Dan C. Rinnert View Post

    If you value your customers, wouldn't you want them to avoid being struck with malware, especially from your own site?

    Or, do you want to be notified first, and not be concerned about what happens to your customers in the meantime?

    If it happened to your website, what would you want people to do?

    LOL You have created a question with an A or B answer, in which everyone who answers this thread will choose A, and the people who would choose B will not say a word, then move on.
    Signature
    Bill Platt, Oklahoma USA, PlattPublishing.com
    Publish Coloring Books for Profit (WSOTD 7-30-2015)
    {{ DiscussionBoard.errors[4939683].message }}
  • Profile picture of the author Architex
    I have gotten malware from major news sites. I think they came in through the ads. I still go back. But I also know how some of these things work.
    Signature
    Architex
    {{ DiscussionBoard.errors[4939686].message }}
    • Profile picture of the author Robin3972
      I would want to know about the problem right away, too, so that I could do something about it.

      Something similar to this happened to one of my clients' websites. He called me saying that one of their visitors to their site emailed saying that they were getting a notice from Google saying something like "this is an attack site" when this person tried to access the site and wouldn't let them access the site. Very strange notice and very scary for my client. I checked and got the same notice. So, I got a hold of the webhost and explained the problem. They immediately did a scan of the site and found the problem. After that we had them install a scanner on the server to check for problems automatically. No problems after that.

      So, yes, it is better to find out about the problem as quickly as possible so that you can do something about it.
      {{ DiscussionBoard.errors[4939767].message }}
  • Profile picture of the author TracyNeedham
    I think most most people are not even going to know where they got the malware from. In fact, they won't actually even know they have any until AVG or whatever does the update and flags it for them or something is going wacky and they decide to run Malwarebytes.

    But if they do know, I'd want them to contact me (the site owner) so I can take care of it. After all, how are they going to effectively get the word out to everyone who might visit my site? It's not like any big media blogs are going to cover it if you're site is barely a blip on the Internet radar.

    And yes, I'd post a message and contact subscribers to let them know what happened, what to look for, what I've done to fix it and how I've taken steps to prevent anything like that from happening again.

    If after all that, someone says, "Well, I'll never go back," then OK. Guess I didn't need them anyway. But I'd like to believe more people will be mollified by me being straightforward and honest about it.
    Signature
    Get You (& Your Offline Customers!) More Sales, More Clients & More Money! 3 Easy Systems + the special secret sauce... TESTIMONIAL T.N.T.

    Discover Easy Tweaks to Get Visitors to Buy NOW
    It's all here in The Sales Supercharger!

    {{ DiscussionBoard.errors[4939792].message }}
    • Profile picture of the author AnitaCross
      D. All of the above.

      If there is a problem with any of my sites, I want to know as soon as possible so I can correct the situation. But I also want my visitors to be protected.

      So I don't have a problem with the word getting out, but I'd like to be the first person my affected/infected visitors contact.

      Like Cru, I would take the site down until the problem was resolved, and like both Cru and Tracy, I'd explain exactly "what happened, what to look for, what I've done to fix it and how I've taken steps to prevent anything like that from happening again." I don't know that I'd provide the steps necessary to remove it, but I would at least provide a link to that information on one or more of the Anti-Virus sites.

      If the site were big enough, I think I'd hire Tracy to do a Press Release for me, so I could get the word out to those who might be reluctant to return after hearing of the problem.

      Thanks for bringing this up, Dan. A compromised site can go a long way towards messing up an online business. How you respond to the problem can win visitor loyalty as easily as it can lose it.

      -Anita
      Signature
      Looking For A Short Cut To Online Retail Profits?
      OSOA on Facebook -- SimplySilk on Facebook

      Anita
      is one of several Moderators at "Live Marketing Chat"
      LMC, mixing work and fun on Saturday nights -- Google it
      {{ DiscussionBoard.errors[4939979].message }}
  • Profile picture of the author nicholasb
    it actually did happen to one of my sites before. I was listed top 3 for in Google for over 150 keywords. They hacked it to where every time I got a visit they were either hit with a virus, or given a warning page.

    So I immediately sent an email to my list alerting them, deleted all the files and used my backup to restore, it took a few hours but ultimately it could of been a lot worse.

    I also made a blog post letting people know what happened, just be sure to always backup your site files offline on an external hard drive.
    {{ DiscussionBoard.errors[4939887].message }}

Trending Topics