My Blog Got Hacked? Please help!

A

AGSniper

Regular Member
Joined
Jul 8, 2009
Messages
266
Reaction score
40
Hello,

Today, I checked 1 of my domain and it got this picture that says I got hacked below. I checked all my domains on my account, and this happened to almost all my Wordpress blogs. Anybody know anything about this?

I can't upload the image for some reason, so here is the link to the image :

http://postimage.org/image/2gubedv8k/
2gubedv8k
 
Advertise on BHW
Change ALL of your passwords and check all of your scripts for modifications (there should be 'last modified' time (although this can still be modified) and check for obvious shells system() passthru() etc. and odd looking files) In addition check other websites on the same box and make sure none of them have met the same fate, if they have it may be the box itself that was rooted in which case contact your hosting company.
 
I am sure it is only a .htaccess file modification. Check your .htaccess file.
Did you used free templates?
 
Last edited:
Change All site and FTP acount passwords
Check your .htaccess ant ather files
 
Make sure you are using the latest version (3.12) I think. This happened to me as their was a flaw in version 2.92 that allowed a backdoor way in.
 
If your worried about leaving hacked files laying around you may want to do a fresh install and then just import your old database. Unless you can find out how they got in by looking at the access logs, etc.
 
kilaz said:
If your worried about leaving hacked files laying around you may want to do a fresh install and then just import your old database. Unless you can find out how they got in by looking at the access logs, etc.
Click to expand...

A lot of times they'll add users to the database so check wp_users before trusting that you're safe.
 
Hello,

Thanks everyone for the advice. I found the majority of the problem in the index.php files of the wordpress file.

However, I am definitely going to check the database and have someone who is experienced check over the website.

I have changed all the passwords and such as well.

Hopefully, this was a temporary thing by an inexperienced person. What also surprised was that my business mail that I use got compromised last week, so I'm trying to see if they are connected. If I could get the IP of the person who accessed my mail, I could definitely match it up to this one.

Thanks again for all the help and support guys.

If you have any suggestions or comments, anything would be appreciated!
 
Have you found how your blog was hacked? Hacker's attack/virus/trojan? I hope your blog is up and running. Best of luck.
 
If you have a copy of the web access logs you should be able to find out what command they issued to hack the site, Unless it was done via some other method (FTP) but more then likely they just exploited one of the PHP files.
 
Definitely get the logs - ask for them at your hosting company. Depending on your luck they will have them or not. Replace all passwords, especially the main WHM/cpanel. Might wanna check your PC for keyloggers and stuff if you're at it :)
Most likely is an exploit.
Keep looking for modified files, your hosting should help you.
 
Will be an exploit that they have ran on a program like scrapebox to mass deface, bunch of script kiddies

"HACKED BY PHG-CR3W"
About 11,300 results (0.21 seconds)
 
This is unfortunate and can happen to anyone, so beware everyone.
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top