HELP-My website suspended by my hosting company - malwares and a python script

So......my first website i have created here this summer and its a small niche site.

I got an email stating the following about my site: (this is exact cut and paste from the email from my hosting company)

We kept receiving daily reports of malware and a python script running along with crypto currencies miners.
In spite of our real time protection and our manual intervention the threat kept coming which is due to a website backdoor in which case there is very little we do.

We have quarantined dozens of files on the account.
The suspension isn't final and we will guide you to retrieve your websites data (involving a scheduled XML export of your data), we would just wait for your answer so we can proceed.

We are at your entire disposal to provide the information you need about the threat.

I have no idea how this happened,.....im not even sure what a python script or crypto miners.....

So, Im fine if this site gets shuit down/trashed....it wasnt the greatest site anyways

But I am starting a new one today.....how can i prevent this in the future?

It was just a wordpress blog site....i plan on doing my next site the same way (for setup....) so

WHAT CAN I DO TO BETTER PREVENT THIS ON MY NEXT SITE WHICH IS ONE I PLAN ON MAKING A LARGE SITE SO I DONT WANT ANY OF THESE ISSUES IN THE FUTURE

THANKS IN ADVANCE

Have you installed any nulled premium themes/plugins that you downloaded from warez sites?

i installed yoast premium from this site

that was quite a while ago.....could this be the issue?

Not necessarily. It could be a PHP malware injected itself via brute force for mining Monero coins.

Install and Configure Wordfence security plugin and scan for any active threats.

ALWAYS update the plugins/themes to the latest version.

The reason why it kept coming back after a manual intervention is the script is updating itself via WP CRON job. Monitor all the active CRON jobs with https://wordpress.org/plugins/advanced-cron-manager/ and delete the CRONs that looks suspicious.

You can also PM me your URL so I can see what can be done to protect it against further attacks.

What? Does hosting companies prohibite crypto mining code nowaways? What is the name of your hosting service?

Thanks for the advice

Im not even sure what a 'CRON' is....but if that plugin will help then im all for it.

I really want to make sure this doesnt happen again

I had wordfence on the old site......but i hadnt touched anything in a cpl months (been too busy) and i think many plugins needed updating and maybe thats why??

thetoothfairy said:

What? Does hosting companies prohibite crypto mining code nowaways? What is the name of your hosting service?

Click to expand...

The hosting company is one I found on BHW here.....I dont feel right naming them b/c I dont want to create any issues.

I am paying about $10 USD per month - I wanted good hosting so that I wouldnt have any issues. Im a bit of a newb when it comes to hosting and files etc.......I just use wordpress cause its easy and theres lots of youtube vids for "how to's " haha

mdcnet said:

I really want to make sure this doesnt happen again

I had wordfence on the old site......but i hadnt touched anything in a cpl months (been too busy) and i think many plugins needed updating and maybe thats why??

Click to expand...

As I said, Wordpress has a lot of moving parts in the back-end and it's highly recommended to keep all your themes & plugins UPDATED to keep it running smoothly. It's very similar to what would happen to a food that is left untouched for several days/weeks/months. It'll get infected if it's not properly secured.

mdcnet said:

The hosting company is one I found on BHW here.....I dont feel right naming them b/c I dont want to create any issues.

I am paying about $10 USD per month - I wanted good hosting so that I wouldnt have any issues. Im a bit of a newb when it comes to hosting and files etc.......I just use wordpress cause its easy and theres lots of youtube vids for "how to's " haha

Click to expand...

Never intended to hi-jack the topic but you can get a MUCH SECURE & Blazing fast WP for just $5/month. Check out the features @ https://spdywp.com

It's my own service and you'll never have to post a thread if you have an issue with your Wordpress site. I'll fix whatever issues you may have and there won't be an issue at all in the first place as it's a managed service and your site is HIGHLY SECURED from all sort of attacks.

Thx again for the info.

Do I have to keep ALL themes i have downloaded in wordpress up to date? When deciding on a theme I downloaded/added 8-9 themes and then finally activated the one I wanted to use.

mdcnet said:

Thx again for the info.

Do I have to keep ALL themes i have downloaded in wordpress up to date? When deciding on a theme I downloaded/added 8-9 themes and then finally activated the one I wanted to use.

Click to expand...

Why keep all the junk when you're not using it anyway?

Keep the active theme updated and delete the rest.