My sites got hacked

[sangbuif]

My sites got hacked (not sure) and it displays blank page, I look at the source and there is nothing, nothing load. I still have access to my wp-admin and make some changes, except editing display component like web design in elementor or customize section, it all displays blank when I access. I have 2 websites that run on the same hosting and the problem shows up on both. If I restore the backup my websites will go back but a day later it will go blank again.
Anyone ever face this problem? How can I resolve this?

 

[SirSmash]

Well, it's not likely to be hacked if you can restore a backup and a day later it happens again. Unless you got some real determined person and, for whatever reason, you're not changing your admin password after you restore the site.

What it sounds like is your database is going offline. You're likely using too many resources and it's either crashing or the web hosting provider is shutting down the process. This is how you'd get both website on the same hosting having the same problem. You'd solve it by checking if this is indeed happening, and then you might just need a better hosting plan.

 

[sangbuif]

I used Imunify360 in cpanel and it detected some malware string hiding in my index.php file, but the tool handle it, but then a day later it will comeback to blank page, I assume the tool damage some file and return blank page, not just because of the malware, for now nothing is sure

 

[piyushk]

My sites got hacked (not sure) and it displays blank page, I look at the source and there is nothing, nothing load. I still have access to my wp-admin and make some changes, except editing display component like web design in elementor or customize section, it all displays blank when I access. I have 2 websites that run on the same hosting and the problem shows up on both. If I restore the backup my websites will go back but a day later it will go blank again.
Anyone ever face this problem? How can I resolve this?

I would suggest you to contact your web hosting provider first, they will clear you if it is a kind of issue or hacking. once you know the reason, hire someone to clean it up. This is what did when my site was hacked.

 

[SirSmash]

I used Imunify360 in cpanel and it detected some malware string hiding in my index.php file, but the tool handle it, but then a day later it will comeback to blank page, I assume the tool damage some file and return blank page, not just because of the malware, for now nothing is sure

You should probably quit using nulled themes/scripts and, perhaps, tell us this information from the start next time. Real hard to diagnose issues if you're not telling us the entire story.

Restore from the backup and change your passwords, if you're not using nulled themes/scripts.

 

[sangbuif]

You should probably quit using nulled themes/scripts and, perhaps, tell us this information from the start next time. Real hard to diagnose issues if you're not telling us the entire story.

Restore from the backup and change your passwords, if you're not using nulled themes/scripts.

should I change the cpanel password? never change them when the hosting provider give it to me

 

[xReminisce]

should I change the cpanel password? never change them when the hosting provider give it to me

yes
you should

 

[8492reks]

Maybe that is "White Screen of Death", try read this step by step
https://www.wpbeginner.com/wp-tutorials/how-to-fix-the-wordpress-white-screen-of-death/

 

[sangbuif]

Maybe that is "White Screen of Death", try read this step by step
https://www.wpbeginner.com/wp-tutorials/how-to-fix-the-wordpress-white-screen-of-death/

it's not really, I followed the step and it didn't work, I changed all the passwords and updated all the plugin and wp version to the latest and restrict access to core file, something mess up my htaccess file and erase every text in it

 

[The First Grader]

I would suggest you to contact your web hosting provider first, they will clear you if it is a kind of issue or hacking. once you know the reason, hire someone to clean it up. This is what did when my site was hacked.

I suggest you to do what he said.

 

[GenesisOne]

Usually you have several backups available - use the one that works best.

 

[ValeVerga]

Contact your hosting service, you are paying them for this kind of situation

 

[sangbuif]

the problem is gone, not sure what cause but I did what I mention before

 

[PetsStore]

Null theme, crack plugins will be used for backdoor

 

[Ridlance]

Use a reputable security plugin like Wordfence and Site Sucuri and Perform a comprehensive scan of your websites to detect any malware or vulnerabilities.
Also, Ensure your WordPress core, themes, and plugins are all up to date and Remove any plugins or themes that you are not using, as they can be potential entry points for hackers.

Please Change your WordPress admin passwords, FTP passwords, and database passwords immediately.

Note - If you have any old backup then restore but ensure your backup is clean and free of malware before restoring.

 

[lotsofmoney]

This does not sound like a hack. Were the sites making any money? If not, what is the incentive for hacker to hack this?

 

[umbreno]

You better hope this isn’t a hosting provider level platform hack. Who is your hosting provider?

And do you have any backups?

 

[Moon Marketing Agency]

Try changing your WP password and use the backup version to repair the website and wait to see if it's okay the next day? I think your WP password was leaked so someone came in and used it

 

[sangbuif]

Try changing your WP password and use the backup version to repair the website and wait to see if it's okay the next day? I think your WP password was leaked so someone came in and used it

You better hope this isn’t a hosting provider level platform hack. Who is your hosting provider?

And do you have any backups?

This does not sound like a hack. Were the sites making any money? If not, what is the incentive for hacker to hack this?

I restored the data and changed all the passwords and restrict access to core file, everything seems good now, maybe the password was leaked somewhere because I never change the cpanel password since they gave me as well as the wordpress password I gave them to identify some problems earlier.

 

[CyberCommander]

install the Cleantalk Antispam & Cleantalk Firewall Plugin in Wordpress and you will have never problems with hackers
https://cleantalk.org/