Title: Some odd hacking attempt
Last modified: August 30, 2016

---

# Some odd hacking attempt

 *  [lucifer63](https://wordpress.org/support/users/lucifer63/)
 * (@lucifer63)
 * [10 years, 7 months ago](https://wordpress.org/support/topic/some-odd-hacking-attempt/)
 * Hello!
 * Today i decided to make a backup of one of my client’s [site](http://zhivi-center.ru)
   and all of a sudden found in the root folder of the site the file [albanian.php](https://c92939138ceaf6ea3219c1c4b4548edc1ce9dde6.googledrive.com/host/0B9sdL93unR2TOG9PZXVXWm9XV1U/albanian.php)(
   [live](http://jsfiddle.net/7s5s6tq2/show/))!
 * Also i found that files [options.php](https://c92939138ceaf6ea3219c1c4b4548edc1ce9dde6.googledrive.com/host/0B9sdL93unR2TOG9PZXVXWm9XV1U/options.php)
   and [wso.php](https://c92939138ceaf6ea3219c1c4b4548edc1ce9dde6.googledrive.com/host/0B9sdL93unR2TOG9PZXVXWm9XV1U/wso.php)
   look a little bit odd, you can see there some utf-8 encoded text mixed with PHP,
   isn’t it odd?
 * The most strange thing is that nothing else has changed: FTP passwords are not
   changed, wp-admin passwords are not changed, mysql passwords are the same as 
   i left them and that’s it.
 * This is the first time someone hacked me)
 * Have this happened to some of you, guys?
 * Also, pls tell what i can do to protect my site, how to find security hole which
   this albanian nuttah has came through ? Does wp has some plugins or maybe built-
   in instruments to find it out ?
 * Thanks in advance!

Viewing 3 replies - 1 through 3 (of 3 total)

 *  [Andrew Nevins](https://wordpress.org/support/users/anevins/)
 * (@anevins)
 * WCLDN 2018 Contributor | Volunteer support
 * [10 years, 7 months ago](https://wordpress.org/support/topic/some-odd-hacking-attempt/#post-6539630)
 * Try some of these resources:
    - [https://codex.wordpress.org/FAQ_My_site_was_hacked](https://codex.wordpress.org/FAQ_My_site_was_hacked)
    - [https://wordpress.org/support/topic/268083#post-1065779](https://wordpress.org/support/topic/268083#post-1065779)
    - [http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/](http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/)
    - [http://ottopress.com/2009/hacked-wordpress-backdoors/](http://ottopress.com/2009/hacked-wordpress-backdoors/)
 * Additional Resources:
    - [http://sitecheck.sucuri.net/scanner/](http://sitecheck.sucuri.net/scanner/)
    - [http://www.unmaskparasites.com/](http://www.unmaskparasites.com/)
    - [http://blog.sucuri.net/2012/03/wordpress-understanding-its-true-vulnerability.html](http://blog.sucuri.net/2012/03/wordpress-understanding-its-true-vulnerability.html)
 *  Thread Starter [lucifer63](https://wordpress.org/support/users/lucifer63/)
 * (@lucifer63)
 * [10 years, 7 months ago](https://wordpress.org/support/topic/some-odd-hacking-attempt/#post-6539650)
 * Wow, i found out that i have WSO installed on my site and that WSO is an amazing
   tool to have a control over my virtual host. The question is – why didnt this
   hacker used WSO ?
 *  [tech55541](https://wordpress.org/support/users/tech55541/)
 * (@tech55541)
 * [10 years, 7 months ago](https://wordpress.org/support/topic/some-odd-hacking-attempt/#post-6539664)
 * I don’t know. Sometimes hackers arn’t the smartest people in the world you know?

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Some odd hacking attempt’ is closed to new replies.

## Tags

 * [albanian](https://wordpress.org/support/topic-tag/albanian/)
 * [hacked](https://wordpress.org/support/topic-tag/hacked/)
 * [Hackers](https://wordpress.org/support/topic-tag/hackers/)
 * [lol](https://wordpress.org/support/topic-tag/lol/)

 * In: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
 * 3 replies
 * 3 participants
 * Last reply from: [tech55541](https://wordpress.org/support/users/tech55541/)
 * Last activity: [10 years, 7 months ago](https://wordpress.org/support/topic/some-odd-hacking-attempt/#post-6539664)
 * Status: not resolved

## Topics

### Topics with no replies

### Non-support topics

### Resolved topics

### Unresolved topics

### All topics