Repeated .htaccess hacks (9 posts)

  1. dontbegauche
    Posted 4 years ago #

    Hello I hope someone can give me some help with this problem, I know multiple people are facing this issue, which seems to have surfaced last week (this string at least):

    My .htaccess files on my web server are being repeatedly injected with redirect code, to Russian malware sites. For instance, the first redirect was to "brend-store.ru". I quickly removed the redirect code from every .htaccess file, and that fixed the problem temporarily. However, about everyday (besides Saturday/Sunday- do hackers need rest too?!) the .htaccess files are injected again, and I have to repeat the same steps.

    At this point, I don't know if this is a FTP password stealing problem/trojan virus on my computer, or if there is some hack code in my websites' files that is allowing these attacks.

    Anyone have any help? I am becoming desperate.

    FYI: I am resetting my FTP passwords daily, running antivirus scans multiple times a day. This seems to be directly related to WordPress users, so I am guessing the hack is coming/came through WP somehow.

    Thanks for any help!

  2. esmi
    Forum Moderator
    Posted 4 years ago #

  3. Who is the web host?

  4. dontbegauche
    Posted 4 years ago #


  5. With some shared hosts, the hacks actually come from from other, insecure accounts at the host. Sometimes you have to change hosts.

  6. Tom
    Posted 4 years ago #

    That's the problem with shared hosts, especially bigger hosting companies like this which cram so many people/ sites onto the same server - all it takes is for one account to get hacked & you're all compromised.

    Find a decent host

  7. dontbegauche
    Posted 4 years ago #

    Any recommendations for a good host?

    I am still not sure the problem isn't in a hole in my site's files or a backdoor etc. I'm going through everything like a crazy person trying to find the problem. So far nothing.

  8. Tom
    Posted 4 years ago #

    Personally I've not tried any of the recommended WordPress hosts listed here.

    ...But I'm reluctant to make a personal recommendation as I'm not sure what the rules are here for advertising. And my link would probably be seen as an advert, since I own the business :)

    There's lots of web hosts out there, have a look at some comparison sites. Although take note: cheap usually doesn't mean 'decent'. Cheap usually means 'crammed full of lots of accounts/ sites'.

Topic Closed

This topic has been closed to new replies.

About this Topic