[HELP] Site got hacked

Owlpic

Owlpic

Regular Member
Joined
Mar 8, 2010
Messages
285
Reaction score
99
Hi,

My WordPress site got hacked. This is a new site and a new web host I was trying out. There was "shell.php" which I deleted and there were changes in "wp-login.php" & "index.php". The user was also deleted and default "admin" user was there. Screenshots below. Any help really appreciated.

http://imgur.com/a/hjm1a

Best Regards,
Rajesh
 
Advertise on BHW
Next time, back up your site and keep a copy off your server. That's really all I can tell you. I don't know if there's anything you can do legally. They probably couldn't catch the guy, anyway.

Another matter is what he put on your site... that message is very disturbing.
 
It seems that your hosting company did not have a backup. Avoid using new hosting companies.
 
Did you have the most recent version of WP there? Which plugins were installed?

You must know how did the hacker get in before installing the blog again or else he will come back again.

Most webmasters show off by how many plugins they have on their blog not knowing that insecure plugins are a major security risk.
 
Hey man,

If you like, I can take a look here for you.
I've seen a lot of hacked WordPress sites, and was able to clean most of them.
If ya wanna this, just send me cPanel login details and I'll check it out for you.
 
I'd expect you got hit by 1 of 3 ways:

1. infected plugin - feel free to pop over your plugins, I'd happily scan through them and let you know if they're guilty or not.

2. Bad password choice - either host/cpanel/ftp etc or WP - make sure you're using good strong passwords, not some crappy simple word/number stuff. (there are good strong password generators all over the web)

3. less likely, but maybe you have a crap host - so they got hacked first?

For me, I'd do a DB back-up, uninstall the lot and re-install, just in case anything is still infected or broken

If you're keeping your installation -
Ensure you're WP and plugins are up to date
There are a number of exploit scanner plugins you can install into WP - maybe worth a check..

Si
 
Same exact people attacked my site, I just removed everything since it was a trash/test site anyhow. I use hostzillas free cloud hosting if it makes any difference. Not sure if it started there
 
One of the common exploits is your wp theme, even a reliable theme is not safe. Trying to outdo other themes they include exploitable scripts. Not that they want to, but by design those scripts make themselves available to break in with simple hacking scripts. Change your wp theme if using one, my advice.
 
You can also try reinstall wordpress and use the same database config file and your site should be right back to normal
 
I rely a lot on my .htaccess to protect my site and my files. Also, I use plugins as Better WP Security and Security *****. I always check CHMOD permissions on my folder and files. I am a web designer, so I create my own themes based on reliable wordpress frameworks and I always make updates. However, no one is 100% protected.
 
I have fairly good instructions on my website as to how to secure a WordPress site. secure-your-website dot com. The $17 plug-in does add
another layer of security, but you'll do a good job of locking everything down if you scroll down to the link for "My Written Instructions" and
follow those instructions.

You only need enough skill to get into File Management in CPanel (I use Hostgator), and be able to find and activate plug-ins from Wordpress dot org. This is easy from within your WordPress site. It took me two weeks of studying two WSOs (Bulletproof and WP-Padlock), and some
YouTube videos to write it. If you have comments or can suggest additions, I'd love to read them.​
 
I had an issue where someone was spammimg my blogs. One thing I had to do was change my blog posting e-mail to something harder to guess. You also have to probably change your password and report the incident to WP.
 
O man I got hacked a while back, and it was an ordeal, I say depending on how bad it is you might have to reinstall WP, but if you have hostgator you might be able to manually delete the harmful files.
 
WordPress is very popular platform these days..Anyone wants to crack and hacked your site. Some steps to take Don't use ‘admin' username, Install Login LockDown Plug-in , Install Secure WordPress plug-in, Move your wp-config.php file so on..also check this codeforest.net/10-wordpress-security-tips-that-could-save-your-site
 
1. Change your user name and password for mysql.
2. Move your wp-config.php file up a directory so that it is in /home/yourusername/ instead of /home/yourusername/public_html/
3. Update your wordpress
4. Update your plugins
5. Search your upload folder for files ending in php
6. make sure file permissions are chmod 0755 for directory and 0644 for files
7. Don't install Wordpress with Fantastico ... learn how to do it by hand.
8. Don't install plugins that require insecure file permissions or have instructions like chmod 0777 your plugins directory
9. Install Timthumb vulnerability scanner and run it on your site.
10. Use a different admin username than admin.
11. Don't use the same password on every WP site you own and on every forum you join (no offense guys) as it will eventually get into the wrong hands.
12. Use something like Last Pass for Firefox to store your passwords for each site so that you can remember all this stuff!
 
Ask your webhosting provider for better advice.
 
Last edited:
I had similar problems with a site that was constantly getting hacked even thoguh I had everything up to date and locked things down as much as possible.

Installing Wordpress Firewall 2 stopped it from happening :P
 
This post will help to prevent attacks next time: w00w00w.blackhatworld.com/blackhat-seo/blogging/464934-guide-secure-your-wordpress-website-howto.html
 
I think your plugin is damaged.
please reinstall WordPress and also plugin and then may be secured to your blogging site.
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top