Website malware attack prevention

Malware is a malicious code that includes viruses, worms, and trojan. Malware works like unnoticed, in-actively hiding or not making its presence on a system known to the user 

1. Take site offline, configure web hosting to "503 service temporarily unavailable". Google webmaster tool suggests, taking website/application down(offline) is better than using robots.txt to prevent search engines from being crawled.

2. Keep licensed antivirus up to date and always scan your computer for malwares, virus, trojans and other infections and enable internet and mail security on.

3. Change FTP password and all the login account password with strong password (Minimum 8 characters in lengthshould contain a mix of alpha, numeric and special characters)

4. Don't save password in local machine directory or filezilla

5. Use SFTP instead of FTP in filezilla.

6. In Wordpress, Ensure make sure all plugins are up to date. Since wordpress is a commonly used system.

7. Contact your web hosting provider to check if the attack affects other sites on the server, and ask them to address the problem.

8. Avoid to use Iframe in website pages