Be careful guys, I currently host 14 WordPress sites and 9 of them have been hacked with malicious code in certain php files! I'm losing so much money, this is a IM's nightmare. There is a zero day exploit currently out there on the newest version of wordpress and they're using it to gain admin control access
Beware WordPress users!!
- Thread starter 2k9bomb
- Start date
SuperNoobInc
BANNED
- Dec 28, 2011
- 474
- 35
Ouch.
How did you find out you got hacked? Is it obvious.
Now this has became part of my concern as well. How do I go about finding the code etc.
Please advise. Thanks
Skywalker
Junior Member
- Nov 2, 2009
- 174
- 44
Happen to mine about a month ago. A give away is when the "Warning Dangerous Download" crap shows up on the sites yahoo search results. Still waiting for it to be removed. Had to hire a someone to go thru all the sites on my server and clean them for malware. Also, took precautions so it doesn't happen again. it sucks, gl.
I also installed this plugin and it emails me whenever something odd happens and it blocks something suspicious. Which is quite a bit.
Wordpress Firewall 2
I also installed this plugin and it emails me whenever something odd happens and it blocks something suspicious. Which is quite a bit.
Wordpress Firewall 2
Last edited:
I use BulletProof Security on all of my WordPress sites but 9 still got hacked. Two of my friends have had their WordPress sites hacked also.
The best advice I can give is to back up your data before this happens to you! Trust me, I've been working on this FOR HOURS and it's nothing but frustration, and unnecessary time & money loss!
I have the latest version (3.3.2) installed on all of my WordPress sites
staycoolmen2006
Regular Member
- Aug 5, 2010
- 345
- 149
always use vt before installing any files if downloaded from anonymous sites...
ProAffiliate01
Junior Member
- Feb 27, 2012
- 147
- 10
Something similar happened to me at one time. I made sure since then my blogs were more secure.
BlackhatArticles.com
Registered Member
- Apr 20, 2012
- 62
- 9
I removed all plugins and malware code from footer.php. I was ranking first due to no competition, but now my Domain is nowhere for my main keyword. 
Only FB profile is helping me to rank 3rd.
Only FB profile is helping me to rank 3rd.
LakeForest
Supreme Member
- Nov 11, 2009
- 1,268
- 1,816
Not to insult anyone's intelligence who got hacked: Please make sure you have disabled access by anonymous FTP.
It's such an absurd setting to be allowed by default in cpanel, especially when everyone with the capability and intent to be malicious knows anon ftp is pretty much the easiest way to mess your shit up besides root.
Also, change where you locate your admin/login directory and make your passwords for everything ridiculous (and I don't mean using 3 for the letter e).
Personally, I've never really trusted a plugin for safety, but maybe it's time I at least give them a more serious consideration.
It's such an absurd setting to be allowed by default in cpanel, especially when everyone with the capability and intent to be malicious knows anon ftp is pretty much the easiest way to mess your shit up besides root.
Also, change where you locate your admin/login directory and make your passwords for everything ridiculous (and I don't mean using 3 for the letter e).
Personally, I've never really trusted a plugin for safety, but maybe it's time I at least give them a more serious consideration.
HatIsBlack
Regular Member
- Sep 17, 2010
- 266
- 188
You can protect yourself by changing permission for writing by the webserver to the files.
Fischlein11
Banned - Shitlisted and did not do the right thing
- Feb 22, 2010
- 282
- 104
Same here. My 4 Sites are hacked with this SHit.
It takes HOURS to remove this crap
It takes HOURS to remove this crap
zoyaraymonds
Regular Member
- Jan 16, 2012
- 489
- 142
don't use cracked theme
xxf8xx
Supreme Member
- Nov 30, 2009
- 1,322
- 605
My entire hosting was hacked recently. All my sites redirected to a Russian domain. I fixed it by running some script which scans every file on your hosting and searches for malicious code. Then I just deleted those files it found.
EDIT: Just a heads up. Changing file permissions won't usually help as the hacker has access to change the permission via a webshell. When it happened to mine all my htaccess file were hacked and then set back to 444 (as if the hacker thinks I don't know how to change it back). Best way I found to be safe is to update everything as soon as it comes out.
EDIT: Just a heads up. Changing file permissions won't usually help as the hacker has access to change the permission via a webshell. When it happened to mine all my htaccess file were hacked and then set back to 444 (as if the hacker thinks I don't know how to change it back). Best way I found to be safe is to update everything as soon as it comes out.
Last edited: