My Wordpress site - compromised?

Hey guys,

I've not checked my email for the last few days and have come back to find an email from iThemes security prompting me to update my wordpress version (I logged on and checked, it is up to date).

But I also received several emails from my wordpress email (mysite@wordpress...) to my personal email which is with mail.com which has blocked them and says they contain a virus... I've never experienced this before...

does anyone know what this might be, or have suggestions on what to do?

My thought was that because i can still login fine it might have been hacked and used to send malicious emails?

Really appreciate any ideas

yes it could be hacked that way. Try also site:domain.com to see if any subpages are added

TyperX said:

yes it could be hacked that way. Try also site:domain.com to see if any subpages are added

Click to expand...

Thanks for the input.
I checked and didn't find any odd new pages

There's been a big attack on wordpress recently - could be you were caught up in it - see sucuri blog for details

Can anyone who has knowledge of this security stuff recommend a course of action? Can't see any new pages added, same password still works... if I change my password am I in the clear? But I dont know how the infected emails came about :/

Moved to Web Design.

A wordpress site of mine was hacked recently. The hacker accessed my mailbox and sent 100,000's of emails, my mail folder located on my shared hosting account filled to capacity and the website was inaccessible. It was quicker for me to reset the whole thing (i.e. clear my public_html folder and refresh my cPanel) than delete 100,000's of files from a remote server. and then upload the whole thing again (lucky I had a local copy).

If you upload your website via FTP then go to your mail folder which will be located at the root of your domain and see if any of the folders within that directory are filled with amass of strange files.

It may also be worth checking your sent box from your domains mail box to check activity.

If you can, it will be worth backing up your website now if you do not have a recent copy.

AND If you have not already changed your password do it now.

I suggest downloading WordFence, its a plugin for your wordpress and scans the whole site for malware and other harmful viruses.

there is a lot of hacktivity recently due to vulnerabilities in wordpress 4.7 and 4.7.1
please update ur wordpress site to 4.7.2 and those vulnerabilities will be patched
lastly, please install wordfence plugin, it helps to protect ur site.