My WP site Got hacked ! New 300 spam articles are published !

[khaledbaddez]

hey today after checking my website i found new 300 articles on my wordpress website that i did not post ! why this happened and how to protect my site to not happen again !

 

[michaelr1988]

I haven't used wordpress in a long time, but pretty sure these basics still apply.

- Don't use "hacked" themes. Pay for them, or use a reputable one. Same applies to plugins.
- Install something like wordfence security and scan files.
- Limit login attempts (plugin) I think wordfence mentioned above can do this.
- Name wp-admin/wp-login url to something else. (plugins can do this)
- Delete old themes and plugins no longer in use.

 

[BrandingCat]

https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/

 

[pauliakas]

Also, check your computer for viruses.

 

[Rj268]

If its Japanese text, they got in through your hosting account. Happened to me and many others.

 

[Compazz]

As someone familiar with wordpress sites being hacked numerous time things people often neglect are

1. Dont install nulled themes and plugins it's not worth it

2.always use 1 developer to manage your sites and ensure you establish some trust before letting anyone access your site.(try to retain them for future works)

3. Download current .htaccess file and Google default wordpress httaccess and reload your site

4.try to uninstall any recent themes or plugins to test check your site.
5. Use secured password and security wordpress plugins to ensure safty of your site.

 

[YujinTan]

If its Japanese text, they got in through your hosting account. Happened to me and many others.

this is what I ask yesterday usually those hacker who hack site what's the first thing the do.

I used to get hack like OP, yes suddenly got new content and links to a shop which is that hacker affliate
is very troublesome and piss off , along the way to ask expert clear , yes is paid , and need to rank it again till now I still stuck all thanks to the hack.

This is where i get wordfence, yesterday i received one email from them mention got admin log in , from japan .

I check nothing happen to the site till now still ok.
I also check got any new admin added , it don't have.

I wonder is it been stop by wordfence behind etc I not sure .cross my finger.

 

[Psh]

https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/

How's this one compared to Wordfence? I use both on different sites, but I don't know anything about Wordpress security.

 

[BrandingCat]

How's this one compared to Wordfence? I use both on different sites, but I don't know anything about Wordpress security.

Me either, but I find this more noob friendly and it does what i am looking for.

 

[khaledbaddez]

I haven't used wordpress in a long time, but pretty sure these basics still apply.

- Don't use "hacked" themes. Pay for them, or use a reputable one. Same applies to plugins.
- Install something like wordfence security and scan files.
- Limit login attempts (plugin) I think wordfence mentioned above can do this.
- Name wp-admin/wp-login url to something else. (plugins can do this)
- Delete old themes and plugins no longer in use.

i do not know what's wrong ! but it sounds like the plugin section in my wordpress is unactivated !

 

[fas66]

One important tip is to always delete the old unused themes and plugins.

And for the image above , does your hosting take regular backups, you may contact them to recover the files and also ask them for the source of the attack.

 

[pressrelease]

Unless we see the url we cant comment what may be the actual reason for h a c k, as backdoor could be through nulled theme or may be through your host.

 

[GregFromMoonsy]

hey today after checking my website i found new 300 articles on my wordpress website that i did not post ! why this happened and how to protect my site to not happen again !

The most common reasons are always weak passwords to:

- WP
- Cpanel / Plesk
- phpMyAdmin
- FTP account
- hosting account
- mysql (especially when allowed are far connections)

The next reasons are:

- security holes in plugins
- security holes in themes

There are plenty of ways to search for blogs which have the mentioned security holes.
You should always remove everything what you not using, not just "deactivate" it.

The biggest WP security issue is - mixing php scripts with html code + clear path/info about installed theme

Cheers, Greg.

 

[pauliakas]

View attachment 121375
i do not know what's wrong ! but it sounds like the plugin section in my wordpress is unactivated !

check You wp_config.php file