(help) Got hacked !!!

insom

Regular Member
Joined
Oct 21, 2018
Messages
210
Reaction score
148
I just checked google webmaster for one of my websites and noticed almost 40k internals links. My website just has 5 pages and 5 blog posts.

In site:Sitename.com its showing 15k results and almost all of them are redirecting to some Spanish ecomm website.

what I did till now:
changed the password
remove all the silly plugins
updated the Wordpress version

Can anybody suggest me what to do more? how to remove those links?
 
Did your host account get hacked? I would check.

Do you have backups? If not, your host might. See if you can revert to an older version of your site. If you don't have daily backups, this is a sign that you should start doing daily backups of all your websites.

Also, do 2FA on every account that is worth anything. Email, host logins, social, wp login, paypal, bank accts, etc.
 
I don't think so its host as my other website on the same hosting seems normal
but thanks for the tip I will contact my hosting maybe they can help
 
Is your username "admin"? That's the most targeted username... if you use it, I suggest changing it to something like "45mfSDA32mS" -- something non-identifiable

Are you running on the most recent version of PHP?
 
Do you use Wordpress? Have you recently used a nulled theme or plugin?
 
no that username was not like that and yeah I was using 7 something PHP version.
most probably it happen coz of some plugins (not sure though)
 
yeah I am using Wordpress..
not exactly nulled but I had some plugins there which I didn't updated from almost 1 years and also didn't updated WordPress
I had some free version of plugins from Wordpress and also a theme that was shared by a reputable member here.
 
check your .httaccess file am sure you will find some shady codes / redirects.
 
check your .httaccess file am sure you will find some shady codes / redirects.

I will check but I am not sure If I will be able to manage that.. Right now reading some blogs from wordfence website to get some idea.

Also, my hosting suggested me that they can run some security check to see if there is any malicious files present and they can restore the website to some previous date
 
Back
Top