page hacked even the WP login page is unreachable

  • nicob73

    (@nicob73)


    6 years, 4 months ago

    Hi,
    I’ve contacted my webhosting and they confirmed I was hacked. For them the best would be to take my backup and reinstall… OK but that’s where I discover, of course, that with the free version of Jetpack, the backup is not included…
    I’ve been through the guide “My site was hacked” but I find no solution as I cannot even reach the WPAdmin login page: it’s redirected before. I’ve tried to scan with Jetpack via my wordpress account, but it’s redirected too.
    For the moment, I’m downloading all the files via FileZilla to have a look, but I don’t know exactly what I’m looking for.
    If anyone could help that would be great.
    Thank you.
    Nico

    The page I need help with: [log in to see the link]

Viewing 3 replies - 1 through 3 (of 3 total)
  • Moderator tobifjellner (Tor-Bjorn “Tobi” Fjellner)

    (@tobifjellner)

    6 years, 4 months ago

    The attacker may have moved the login page to a different URL.

    When you try to recreate your site, keep in mind that your text content (and lots of settings) is actually not stored as files, but in the database of your site.

    Most hosting providers give you access to your database via PHPmyAdmin. You can use this to save a backup of your database and to try and extract your text content.
    Avoid just reusing the database, since there may be bad things hidden in it.

    Thread Starter nicob73

    (@nicob73)

    6 years, 4 months ago

    Thank you very much. If I understood correctly: first I need to restaure wp admin and wp includes, check if it works, backup, change the database, upload and then use more safety tools. The only thing I still don’t understand is how they hacked my password… Because it’s a very strong one.

    Anyway thank you for your help.

    Moderator tobifjellner (Tor-Bjorn “Tobi” Fjellner)

    (@tobifjellner)

    6 years, 4 months ago

    Actually: My suggestion is that you don’t try to get in to WordPress admin panel now. Instead: download your images and other media from /wp-content/uploads/ (Keep an eye on not downloading any .php file you might find there, since that might be a backdoor.)
    And extract your content from the database. And then wipe out your site and build it fresh.

    There are many ways an attacker can break into a site without even trying to guess the password.

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘page hacked even the WP login page is unreachable’ is closed to new replies.