Mass mailing (attack malware)

Hi @famada

If you have only the backup you will need to start restoring it on local computer to run a malware scan.

I suggest using Local WP or studio by WP.com which are straightforward options, I couldn’t find a well detailed guide but this can help https://localwp.com/help-docs/getting-started/how-to-import-a-wordpress-site-into-local/

Once done, use a malware scan plugin https://wordpress.org/plugins/search/malware+scan+login/ to perform a full scan.

This can help as well https://github.com/nitkr/Clean-Sweep-2.0

If the malware is confirmed you can perform a full cleanup https://wpmudev.com/blog/how-to-clean-up-a-hacked-wordpress-site/. But it is possible you had spam submissions from your contact form, so also check the contact form entries ( if your contact form plugin saves it ) to analyse if it wasn’t the case.

Another step you may take is ask for access_log for your hosting provider and use AI to analyse the access log on specific timeframe, let’s say if it happened yesterday, ask AI to analyse past 48 hours on what could be triggering massive emails.

Best Regards
Patrick Freitas – WPMU DEV Support