Hosting revoked, what's this file? public_html/auth/WellsFargo/web/system/blocker.php

[Zakch93]

"Hello,

please explain how this file was uploaded to your account .
/home/naqexeac/public_html/auth/WellsFargo/web/system/blocker.php

--
Best regards"

And hosting suspended. I have no idea what this file is and where it came from. If I had to guess, it's either from a nulled theme/plugin or a php script/CPA network landing page. A google search on it showed a chinese result and it's obviously malicious.

Can I detect which plugin did this, or do I have to erase everything from my site and start from scratch?

And can someone tell us what exactly it is? Curious.

 

[jamie3000]

Could be something like this. The fact that it says Wells Fargo sounds like its part of a phishing kit trying to steal peoples bank details

https://blogs.akamai.com/sitr/2018/10/an-examination-of-a-phishing-kit-dubbed-luis.html

 

[Zakch93]

Could be something like this. The fact that it says Wells Fargo sounds like its part of a phishing kit trying to steal peoples bank details

https://blogs.akamai.com/sitr/2018/10/an-examination-of-a-phishing-kit-dubbed-luis.html

Yeah.

So is there a way of knowing which plugin exactly caused this?

 

[Gogol]

Looks like you have been pwned. The path name looks like a fake bank login page to me.

 

[Zakch93]

Looks like you have been pwned. The path name looks like a fake bank login page to me.

Indeed. Has it ever happened to you? Do you check plugins for backdoor before using even when taken from trusted places?

 

[Gogol]

Indeed. Has it ever occured to you? Do you check plugins for backdoor before using even when taken from trusted places?

Nopes never, because I don't use wp. Wp is the root of all evils lol. I assume a plugin you used had RFI vulnerability (google it for more).

 

[Zakch93]

Nopes never, because I don't use wp. Wp is the root of all evils lol. I assume a plugin you used had RFI vulnerability (google it for more).

All right thanks, what do you use for you sites?

 

[Gogol]

All right thanks, what do you use for you sites?

Yii2 framework mostly. It runs like a sports car, and you can have your own db structure due to the loosely coupled architecture. You could also use laravel if you want. You can achieve the same with laravel.