My webs are hacked

natalia66
(@natalia66)

5 years, 2 months ago

Hello,
I’m having some issues with all my wordpress websites, they start to redirect to many others webs, I’m using WP 5.6.2
I updated all the plugins and themes but everyday at like 9am it happens again

My host doesn’t find any malware but there are some files modified

What can I do?

The page I need help with: [log in to see the link]

Viewing 4 replies - 1 through 4 (of 4 total)

Moderator Steven Stern (sterndata)
(@sterndata)

Volunteer Forum Moderator

5 years, 2 months ago

Get a fresh cup of coffee, take a deep breath and carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures.

If you’re unable to clean your site(s) successfully, there are reputable organizations that can clean your sites for you. Sucuri and Wordfence are a couple.

RossMitchell
(@rossmitchell)

5 years, 2 months ago

First off don’t panic.
These articles will help:

FAQ My site was hacked

https://codex.wordpress.org/Hardening_WordPress

You will find these articles informative:
http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
http://smackdown.blogsblogsblogs.com/2012/11/14/hacked-on-hostpapa-or-netregistry/
http://ottopress.com/2009/hacked-wordpress-backdoors/

First you need to stop them getting back in.
Change the passwords on:
– hosting management login, probably cPanel
– all WordPress administrators
– the WordPress database user and password in your wp-config.php file

If you are on shared hosting, each website should have its own database, and use a different database user / password set.

Install one of the WordPress security plugins.

Stef
(@serafinnyc)

5 years, 2 months ago

I see @sterndata already told you about the fresh cup of coffee @natalia66

Enjoy

Thread Starter natalia66
(@natalia66)

5 years, 2 months ago

Hello!
I think it’s solved
I installed Sucuri, Wordfence, JQuery Monitor and Wp Center, after everything was cleaned up, wp center started to register ips trying to go inside my webs to the wp-login.php and xmlrpc.php, I blocked those archives and after two days my webs still clean and work faster

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘My webs are hacked’ is closed to new replies.

My webs are hacked

Tags

Topics

Topics with no replies

Non-support topics

Resolved topics

Unresolved topics

All topics