Hello, I am Sato of non-standard world.

Previously, I received the following consultation from a client's web agent.

• JPCERT called attention to website falsification.
• As a countermeasure, I was guided to "acquire a backup of the content of website and perform difference confirmation", but what should I do?

As a countermeasure against website tampering, it is useful to compare the content on your website with what you uploaded last time and see if there are any differences in the content so that you can check whether or not an unauthorised file has been installed or the contents have not been tampered.

Extracting Differences from Last Updated File Using "Git"

The recommended method is to download all files on the web server once into a local environment and extract differences from previous versions using version control system "Git".

With this method, you can easily discover suspicious differences without leakage.
For Git, previous article Please refer to the following page for more information.

We would be happy if it is a reference to efficiently and reliably implement countermeasures against site falsification.

Reference) JPCERT/CC alerts "Preparing for cyber-attacks on websites"

https://www.jpcert.or.jp/newsflash/2018071801.html

---

｢ Solving the troubles of corporate site personnel! In the “Contact Us” section, we are looking for questions and questions that corporate web personnel have on a regular basis.
For those who have introduced questions on our blog, we will present you with an original postcard set.
Please feel free to contact us for any small questions from the following “Commentary Sending Form”.
*When posting a blog, please be assured that the company name or your name will not be published.