Just Had Brand New Wordpress Website Hacked!

UrbanMedusa

UrbanMedusa

Junior Member
Joined
Jul 12, 2015
Messages
116
Reaction score
8
I purchased a domain and hosting with HostGator 2 days ago and installed wordpress on the website using the one click installer.

I today decided to do some work on the site and I am faced with a blank white page and a black text message stating I have been hacked by some weird usernames.

I'm 0 in the queue for online chat and have been for about 25 minutes now.

Is HostGator really this crap? if so I will cancel the plan
 
Advertise on BHW
Was it just the latest Wordpress install and what kind of password did you use (and did you go for the default admin username). Failing that do you have any other domains on the account?

If you are on a shared folder its possible another account on the server got done over and gave them access to all the accounts.

If you want a hand getting back and going give me a shout on Skype, it may just be a htaccess thing (hopefully) and they didn't actually delete anything.
 
UrbanMedusa said:
I purchased a domain and hosting with HostGator 2 days ago and installed wordpress on the website using the one click installer.

I today decided to do some work on the site and I am faced with a blank white page and a black text message stating I have been hacked by some weird usernames.

I'm 0 in the queue for online chat and have been for about 25 minutes now.

Is HostGator really this crap? if so I will cancel the plan
Click to expand...

What's hostgator got to do with anything?

if its a brand new install then 1000 things could have gone wrong. simply delete the site and do another wordpress install with a nice long password and then install some free security plugins
 
Are you sure you haven't installed any vulnerable plugin or a cracked theme?
 
HostStage said:
I wouldn't blame the host at first here. Hostagator has many flaws but you can rely on their sys admin skills, giving how they squeeze accounts on basic servers
Click to expand...

Maybe in the good old days, now they are EIG owned, I wouldn't bet on their skills anymore!
 
Did you comb through your FTP folders and look for malicious code? Is your database hacked too? More than likely it's a security hole in the site not the host. Not a fan of hostgator, but if all the sites they host had this problem it would be all over the web.
 
Your hosting server is vulnerable to attacks or the WordPress plugins are outdated. I had the same issue with JustHost, just replace the Index.html. They didn't mess with your files they put the bad Index.html there.
 
Thanks to all the people who took the time to respond to this thread with helpful replies.

It was a fresh wordpress install and I used the unique password that was emailed to me as it looked really secure to me with all the numbers, symbols etc.

My username was my personal icloud email address that I don't give out.

I have since put in the 45 money back guarantee request as I do not like how HG doesn't get back to you.

When ever I have asked for help:

I haven't received a callback
I haven't received a ticket response
I haven't received a response on live chat

From the short time I was with them I thought they were an awful company but with all the mentions about them now being owned by EIG, I assume they are a shell of what they used to be
 
Last edited:
UrbanMedusa said:
I used the unique password that was emailed to me as it looked really secure to me with all the numbers, symbols etc.
Click to expand...
Never a good idea, you should use your own passwords...That NOBODY else knows
 
I wouldn't blame this on Hostgator, I use HG myself and have been extremely satisfied with them. You should read my story, of how my CPA website got hacked over 3 times (this was when I was using Godaddy). http://onlinesidehustle.com/help-wordpress-website-got-hacked/ It sounds like your website got attacked by the same people, same script, and it's extremely easy to fix. I have the method in the link, and if you have any problems you can always message me. I also outline some security tips and measures you should follow. A lot of people are uneducated about WP security or don't take it seriously enough. It's not really the hosts fault. My website was hacked 3 times, but I can honestly say it was my fault for not backing up my site and being ignorant about security at the time.
 
Sir, when a password is emailed it isn't safe anymore. Secondly please enlighten us with the theme you uploaded and the plugins you used. How many of these were cracked/nulled?
 
I never heard any good praises about hostgrator ever thats why I do not like this
 
Ambitious12 said:
I never heard any good praises about hostgrator ever thats why I do not like this
Click to expand...

I have canceled my account with them now under the 45 day money back guarantee and I'm currently waiting for the response.

The customer service is non-existent and I'm thinking of going with GoDaddy next
 
Don't download crap scripts / soft / tools from unreliable sources. This is the best method to protect your money and time
 
Well like I love to say ... You get what you pay :D This is my #1 rule online and offline . That why I end paying 30? for my ssd vps from established offshore eu
provider .

P.S: From what I see they just added .html .. since your wp-admin is accessible.
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top