Hosting revoked, what's this file? public_html/auth/WellsFargo/web/system/blocker.php

"Hello,

please explain how this file was uploaded to your account .
/home/naqexeac/public_html/auth/WellsFargo/web/system/blocker.php

--
Best regards"

And hosting suspended. I have no idea what this file is and where it came from. If I had to guess, it's either from a nulled theme/plugin or a php script/CPA network landing page. A google search on it showed a chinese result and it's obviously malicious.

Can I detect which plugin did this, or do I have to erase everything from my site and start from scratch?

And can someone tell us what exactly it is? Curious.

Could be something like this. The fact that it says Wells Fargo sounds like its part of a phishing kit trying to steal peoples bank details

https://blogs.akamai.com/sitr/2018/10/an-examination-of-a-phishing-kit-dubbed-luis.html

jamie3000 said:

Could be something like this. The fact that it says Wells Fargo sounds like its part of a phishing kit trying to steal peoples bank details

https://blogs.akamai.com/sitr/2018/10/an-examination-of-a-phishing-kit-dubbed-luis.html

Click to expand...

Yeah.

So is there a way of knowing which plugin exactly caused this?

Looks like you have been pwned. The path name looks like a fake bank login page to me.

Gogol said:

Looks like you have been pwned. The path name looks like a fake bank login page to me.

Click to expand...

Indeed. Has it ever happened to you? Do you check plugins for backdoor before using even when taken from trusted places?

Zakch93 said:

Indeed. Has it ever occured to you? Do you check plugins for backdoor before using even when taken from trusted places?

Click to expand...

Nopes never, because I don't use wp. Wp is the root of all evils lol. I assume a plugin you used had RFI vulnerability (google it for more).

Gogol said:

Nopes never, because I don't use wp. Wp is the root of all evils lol. I assume a plugin you used had RFI vulnerability (google it for more).

Click to expand...

All right thanks, what do you use for you sites?

Zakch93 said:

All right thanks, what do you use for you sites?

Click to expand...

Yii2 framework mostly. It runs like a sports car, and you can have your own db structure due to the loosely coupled architecture. You could also use laravel if you want. You can achieve the same with laravel.