Title: AnonymousPharm – Hack
Last modified: August 31, 2016

---

# AnonymousPharm – Hack

 *  [ypeiffer](https://wordpress.org/support/users/ypeiffer/)
 * (@ypeiffer)
 * [10 years, 4 months ago](https://wordpress.org/support/topic/anonymouspharm-hack/)
 * Hi,
 * one of my websites got currently hacked. The Frontend and Backend work perfectly,
   but the hackers installed an online shop in a subdirectory wp-content/extensions/
   wp. Furthermore, they included a custom php-script in every file of my theme.
   Our database is still the same, so they couldn’t get access to this (or they 
   just didn’t want to).
 * **The worst part of this is, that the online-shop is selling drugs**.
 * We found a script called wp-index.php within multiple subdirectories of the uploads-
   folder. For example, in wp-content/uploads/2014/04. This script makes it possible
   to upload files to the server, and everyone who opens it, can see everything 
   on the ftp-server.
 * We had to delete the files from the online-shop via ssh, because the hackers 
   created them with a new user, so we didn’t have the rights to delete/edit them.
 * I took four screenshots: [http://imgur.com/hbMQTRT](http://imgur.com/hbMQTRT),
   [http://imgur.com/GzNmZcY](http://imgur.com/GzNmZcY), [http://imgur.com/PXpRBbV](http://imgur.com/PXpRBbV),
   [http://imgur.com/VFQEg2B](http://imgur.com/VFQEg2B)
 * I know that we have to update the installation ASAP. But is this the only problem?
 * Does anyone have an idea how they could do this?
 * Yanik

Viewing 1 replies (of 1 total)

 *  Moderator [James Huff](https://wordpress.org/support/users/macmanx/)
 * (@macmanx)
 * [10 years, 4 months ago](https://wordpress.org/support/topic/anonymouspharm-hack/#post-6915331)
 * Remain calm and carefully follow [this guide](https://codex.wordpress.org/FAQ_My_site_was_hacked).
   When you’re done, you may want to implement some (if not all) of [the recommended security measures](https://codex.wordpress.org/Hardening_WordPress).

Viewing 1 replies (of 1 total)

The topic ‘AnonymousPharm – Hack’ is closed to new replies.

## Tags

 * [anonymous](https://wordpress.org/support/topic-tag/anonymous/)

 * In: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
 * 1 reply
 * 2 participants
 * Last reply from: [James Huff](https://wordpress.org/support/users/macmanx/)
 * Last activity: [10 years, 4 months ago](https://wordpress.org/support/topic/anonymouspharm-hack/#post-6915331)
 * Status: not resolved

## Topics

### Topics with no replies

### Non-support topics

### Resolved topics

### Unresolved topics

### All topics