I Just Got My Websites HACKED!!

[mikev]

Hello, I just stumbled across this incredibly stressful problem. When I write the domain name of my website, it is blocked by some Indonesian hackers.

What should I do? Please help!

Thanks!

 

[Quadriceps]

Contact your webhosting provider. You should have a backup.

 

[zinxpxbl]

It's not clear what your problem is from your description. DNS hijack? What happens if you dig your.url, wrong ip shows up? Or what specifically is the problem?

 

[Mr Cracker]

Just hit your hosting up and let them sort it out. Why post on here about it, don't waste time.

 

[mikev]

Thanks for the replies I will contact my host provider ASAP!

 

[Couch Monkey Media]

I am guessing you are using wordpress.

once you get it cleared up install and use word fence or some other program like that. Make sure to keep all plugins updated.

 

[mikev]

I contacted the HostGator live chat and it takes sooooo long to respond. Do some of you know what exact steps I should take?

Thanks for all the replies though!

 

[mikev]

This guy is telling me to pay $240/m in order to fix the hacking from my sites! Is this the only way to do so!?

 

[Unknown TM]

No. You still haven't answered - what exactly is the object that has been (theoretically) hacked? Are files intact? Have they been changed? IP? DNS? Tons of options ..

 

[virtualpurity]

This guy is telling me to pay $240/m in order to fix the hacking from my sites! Is this the only way to do so!?

Lol they are just milking you for money.

You just ask for the latest backup to be restored for the website in question. They have to provide you with that free of charge at least, if they refuse i suggest finding a different provider.

p.s Check on FTP if the files are deleted ? Or maybe they have only replaced the index.html file.

 

[mikev]

No. You still haven't answered - what exactly is the object that has been (theoretically) hacked? Are files intact? Have they been changed? IP? DNS? Tons of options ..

The files are actually intact. When I type in my website adress, this is what I receive https://imgur.com/a/q1w06

I can still log in my wordpress account admin panel

 

[zinxpxbl]

You just ask for the latest backup to be restored for the website in question.

If he has some god-forsaken exploitable plugin, he'll just get re-exploited immediately. Some hosts won't simply rebuild from backup for this reason. If that's what the problem even is in the first place.

 

[mikev]

If he has some god-forsaken exploitable plugin, he'll just get re-exploited immediately. Some hosts won't simply rebuild from backup for this reason. If that's what the problem even is in the first place.

So these fucking hostgator contact supporters are just milking me for money. I can't afford $240/m for that. There must be another solution? What do you recommend me do?

Thanks

 

[CyberHour]

Stop using nulled/pirated themes/plugins/scripts

What ever caused the hack, I would suggest getting archive of your database and export your posts which to import latery in the fresh installation.

And of course... get your theme/plugins from the original source!

Lol they are just milking you for money.

This is not always the case!

Also " You just ask for the latest backup to be restored for the website in question. "

Restoring an already infected backup won't help at all in long term.

By the way , the new fancy malwares are cryptominners , yet to be detected with malware scanners.

 

[zinxpxbl]

What do you recommend me do?

Thanks

Install a clean, minimal wordpress package. This means -- NO THEMES, other than the standard, NO PLUGINS, at all, nothing. Import your database backup (you have this, right?) into the new install. Point your domain to the new install. Should cost you whatever time it takes you + whatever $5 a shared hosting costs these days, and you're back on the road.

But before you do that, check and make sure the DNS is correct, which is to say that the IP of your site matches the IP provided by your host.

 

[mikev]

Install a clean, minimal wordpress package. This means -- NO THEMES, other than the standard, NO PLUGINS, at all, nothing. Import your database backup (you have this, right?) into the new install. Point your domain to the new install. Should cost you whatever time it takes you + whatever $5 a shared hosting costs these days, and you're back on the road.

But before you do that, check and make sure the DNS is correct, which is to say that the IP of your site matches the IP provided by your host.

I have 6 more hacked websites that I generate revenue from. (on the same hostgator sharing account) Should I do the same with all the sites?
Thanks for the support. I appreciate it greatly!

 

[virtualpurity]

I have 6 more hacked websites that I generate revenue from. (on the same hostgator sharing account) Should I do the same with all the sites?
Thanks for the support. I appreciate it greatly!

If you want send me the info i can check your websites for you.

 

[StarX]

The files are actually intact. When I type in my website adress, this is what I receive https://imgur.com/a/q1w06

I can still log in my wordpress account admin panel

It seems that they are just replace your index.php with their deface page. If you have backup simply backup it. Also take a look at php shell they probably uploaded to your site, you must delete it to unable them to access again. After that find plugin who is responsible for security hole and update/remove/replace it.

 

[mikev]

If you want send me the info i can check your websites for you.

I can't start a conversation, I need 50 posts to do so. Can you give me another platform I can contact you on?
Thanks

 

[DomeTM1337]

Contact your host for more informations.