WordPress.org

1. sairah
   Member
   Posted 3 years ago #

   Well, apparently this has happened before, so I feel there's some hope. Basically, I got hacked, (defaced, I guess, as all the content is intact). I'm hosted on Host Department (not HostGator as many of the other hacked sites). I don't know what to do, although I've already reset my username and password (changed both).

   I read a post about someone else also getting hacked/defaced, and made my theme directory unwritable, following a precaution I read.

   http://sairah.endless-time.net

   That's my site, and as you can see, it's reverted to an UglyFugly signature page for the hackerz. >.< Any and all help would be appreciated. Also, here's a site where my site is listed as having been hacked, along with the party's supposed alias:

   http://www.zone-h.org/archive/defacer=Very%20Secret

   A few entries down from the top of the list. Direct link to that incident:

   http://www.zone-h.org/mirror/id/8893133

   I don't know if those links will be of any help to anyone, but I figured just in case.

2. whooami
   Member
   Posted 3 years ago #

   are you keeping backups? the simplest way to undo what theyve done is to upload the last file backup you have. That's not going to address how they got in though.

   You also have cutenews on that domain.. what version? where is the homepage for your cutenews install? what other cms-ish or forum-ish webapps do you have running on that domain? and what version are those?

3. sairah
   Member
   Posted 3 years ago #

   I had only just created the blog last week, roughly, that's why I was so surprised.

   Cutenews...let me check what version. 1.4.5

   I was getting lots of spam on it so I took off the commenting feature. Other than cutenews, I don't have anything. However, I had created a homegrown blog, but its comments are also ultra spammed. ='(

Topic Closed

This topic has been closed to new replies.