under attack

Hi WordPress- Community,
recently I created some wordpress page which was quite easy and nice.
But very soon (only ~2 weeks), the page refers to spam and xxx content which was terrible for a child sport community as the page was for.

The main root cause, I thought was a not updated theme (WP Bootstrap starter), or may be some plugins?

So I worked for some articles to hardening wordpress, did several things like hide /wp-admin login page, do some .htaccess to deny/ strengthen access for some config files.

But wordpress broke again. May php.ini files in every folder was spread. WP Cerber Security scanned for a lots of malware. Also the provider detected viruses in wp folders. UpdraftPlus backups was not able to download the theme anymore and many more stuff.

Now page and backend is completely broken.

I tried another installation from the scratched. Installed only plugins and themes which were available through the wp ui.
Only some hours later the same sh**.

How to prevent this?
Is the webspace infect at all?
Or did the maleware ‘jumped’ from the one installation to the other?

My next step may be would be to contact the provider and whipe everything completely…
But may be there is running more than these two installations…

Glad for any help and ideas.

best,
ghmork

• This topic was modified 6 years, 8 months ago by Jan Dembowski.
• This topic was modified 6 years, 8 months ago by Jan Dembowski.