We’ve seen an increase in hacking over the past year, both in terms of frequency and sophistication. We’ve developed some custom tools to help us discover all the files installed by hackers and get rid of them.
We’ve been using a tool called “SiteDash” that lets us view every MODX website we have. It alerts us of any plugins that need to be updated, and we can click one button to update those plugins across every website we’ve developed. It’s a real time-saver and helps us keep all our websites up to date with security patches.
The latest addition to our bag of tricks is a file tracker that runs in the background, recording any executable files that have been added to or deleted from a web server, and also any that have been altered. When any change is noticed, an email gets sent to us so we can investigate and remediate hacking before anything really terrible happens. We’ll be rolling out this feature to all our clients’ websites over time.