Hi, I got an email from DreamHost saying my website may have been hacked and the email identified these files:<\/p>\n
We have identified malicious content on your account, added by an outside entity, which may include malware such as backdoor shells, adware, botnet, and spammer scripts.<\/p>\n
The following file(s) specifically have been identified as attacker-added malware. We have DISABLED these files by setting their permissions to 200 (Owner write-only). You will need to audit these files and either replace them with known good versions or remove them altogether:<\/p>\n
\/home\/user-name\/website.com\/wp-content\/nfwlog\/cache\/backup_1624227373_60cfbe2d1897c2.12561092.php
\n\/home\/user-name\/website.com\/wp-content\/nfwlog\/cache\/backup_1624324452_60d13964650843.54672699.php<\/p>\n
I deleted the files and went through the usual security checklist, but I was hoping you could tell me how this may have happened, or if I need to change settings so it does not happen again? <\/p>\n
Thank you<\/p>\n","protected":false},"template":"","class_list":["post-14601020","topic","type-topic","status-publish","hentry"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/14601020","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":0,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/14601020\/revisions"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=14601020"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}