WordPress.org

Ready to get started?Download WordPress

Forums

Site Hacked Twice in the last 14 days - Advice Needed (6 posts)

  1. MagicStick
    Member
    Posted 2 years ago #

    Hello.

    In the last two weeks I've had to restore my site from a backup twice. First time appeared to be something to do with a phpspy injection hack. My wp-config details were changed and several emails were sent out using a php script which was added to my server.

    I did all the usual stuff. Changed passwords etc and added 'website defender' plugin to my site and followed the advice from there.

    It appears it has happened again today. I have a file on my server called byroe.php and my site will no longer load.

    I'm currently in the process of restoring from a backup but can you guys give me some advice on how to prevent this from happening again?

    Thanks so much.

  2. Tim S
    Member
    Posted 2 years ago #

    Depending on the nature of the hack, determines your course of action.

    You should make sure all the software is up to date, including WordPress and any plugins you may be using. Patches and sofwtare updates are released generally to fix security flaws found in the software.

    Also, you should run a malware and virus scan of your local computer to be sure you do not have anything there. If someone has access to your local machine, no matter how strong your passwords are, they can gain access via a keystroke logger.

    You'll need to change ALL your passwords to a non-dictionary alpha-numeric passwords. It's important to change your passwords regularly and do not set them to the same thing.

  3. MagicStick
    Member
    Posted 2 years ago #

    Thanks TIm. I'm running on a mac so not sure if I still need to do the virus scan. I also use 1Password, which required no keystokes?

    Is there any recommended malware remover for macs?

  4. Tim S
    Member
    Posted 2 years ago #

    whether you are on a Mac or not, running a virus scan is imperative. While viruses for macs aren't nearly as common they are still out there. Mac releases updates for security Apple Security

    I'm not too familiar with apple products, so I can't say I'd be much of a help with that. I can tell you, make sure your passwords to WordPress are strong.

  5. MagicStick
    Member
    Posted 2 years ago #

    Thanks mate. Yeah. I just updated my passwords to wordpress to something very strong. I'll look into virus/malware removal on mac. At first glance I found this which is available on the mac store for free:

    http://www.clamxav.com/

  6. Tim S
    Member
    Posted 2 years ago #

    I work for a large hosting company and some of our customers use the linux version of clamav.

    I personally have never used it, I use a configserver firewall with brute force detection on my own server, but I'm running linux.

Topic Closed

This topic has been closed to new replies.

About this Topic