I just found out yesterday that my html web site was deleted and replaced with an index file that said "powered by frost". We also found a new "sys" directory with movies and mp3 files. These have been deleted. I don't think my WP files have been compromised, but how can I check them?
Thanks for any help, jim
It's good practice to completely rebuild a server in the event of a security breach, you can never be sure what they have or haven't gotten into or infected with back doors.
That's probably a good idea. Thanks. However, it doesn't give me the cause. I'm just trying to figure out how this could have happened. Did I visit a site and click on something? Could it have been a plugin? Could it have been just luck in guessing a password? What?
Do a search on defacing websites and you might get an answer to what happened to your site. Mine was defaced twice before I updated my WP. I've had several script kiddies try to deface my site since I upgraded but they were not successful.
Heck, you can even find step-by-step directions on how to use a defacing script on almost any type of server.