My website was hacked & turned into a PBN

[Universe0]

This is new! I have a wordpress website that i mostly use for tests and today i logged into and i noticed some articles that i did not published.

It turns out that the site was hacked and it was used as a "PBN".

From the bright side i have some other affiliates now that i can check for ideas.

But it is a pitty for all the buyers that have purchased these PBN posts and they were scammed and it could be any of us.

 

[virtualpurity]

What makes you think that its a service that sells pbn posts instead of the attacker taking advantage of the hack for himself ?

 

[w1ll]

What are the posts talking about?

 

[Universe0]

What makes you think that its a service that sells pbn posts instead of the attacker taking advantage of the hack for himself ?

Because the posts were made the same day and time and linking to at least 30 different links. Yeah sure they can be all the attacker's website, but the posts remind me many pbn posts i have seen.

 

[Deleted member 1038636]

Lol, it can be a plugin infected with malware, can be advertising code into a header.php file or other file.

If you have access to your blog, change password, user, delete all plugins and reupload a clean backup. Using a lot of plugins can cause a lack of security.

 

[StormClaw]

Lol, it can be a plugin infected with malware, can be advertising code into a header.php file or other file.

If you have access to your blog, change password, user, delete all plugins and reupload a clean backup. Using a lot of plugins can cause a lack of security.

Agreed, OP you need to go back and check what was the latest plugin you used and If it's nulled. Then you're at fault. If not, try to figure out what went wrong.

 

[Owanceaser]

If Possible means find out the plugin and remove it otherwise contact your hosting department to remove the hacked files.

 

[Universe0]

Lol, it can be a plugin infected with malware, can be advertising code into a header.php file or other file.

If you have access to your blog, change password, user, delete all plugins and reupload a clean backup. Using a lot of plugins can cause a lack of security.

Only using 4 plugins, of course not nulled, and one of them is wordfence, lol.

Anyway done all that and we are good to go.

 

[batikmerah]

grep on your access log is the best way to find out whats going on

 

[Morteza]

He was a talented hacker.

 

[Deleted member 1038636]

Only using 4 plugins, of course not nulled, and one of them is wordfence, lol.

Anyway done all that and we are good to go.

Here is a proof, how Wordfence won't protect you against all attacks, I always I been said here. Wordfence is not magic, wordfence won't protect you against hackers, if you don't increase the security on server side.

That's one proof how "Wordpress Security Plugins" isn't good at all.

 

[Universe0]

Of course wordfence or similar security plugins cannot be a 100% remedy for all.

There are many ways to gain access and it was a clever move to add PBN posts.

Anyway i took all the necessary steps to secure the site, but as i told before it was just a test site so no worries about any damage.