omg, my website is hacked, why...?

T

tenam

Registered Member
Joined
Jun 2, 2017
Messages
52
Reaction score
3
Google tells "This site may be hacked." my website suffers from “URL Injection” hacked type after research.
What I used are all bought from official website like the theme, plugin....
I found that my webiste is index by google with content not created by me.
something like this: mydomain.com/g12345 where the title is things like "nude,sex..etc..." I never do this....how to fix this issue?
many thanks..
 
Advertise on BHW
Where you purchased your theme and plugins is a red herring in this case. Your site can still be hacked through brute forcing, zero-day vulnerabilities, outdated plugins, etc.

There's no one-size-fits-all answer to this. If your site's fairly small, the easiest thing to do is to rebuild the entire site rather than spend time trying to figure out how the hacker got in, what backdoors they've left, where the malicious code is, etc. Download any images you have, save the text in a notepad, and wipe the site from the server. Re-download a fresh copy of the themes and plugins you used, and set everything back up. Do this during the time that your site receives the least activity in order to avoid interrupting as many users as you can. Additionally, update your site's login credentials and don't use something simple like "admin".

Also, make sure your site is actually hacked and it's not a false alarm. Sometimes, when a site on the same server as your site is hacked, Google will display a warning as if it was your site that was breached. I recall this being the case for one of my clients last year who got a hacked site warning and then a "social engineering content" warning.
 
Do you have a backup of the site "pre-hack" ? Restoring to that backup won't fix the backdoor/vulnerability but it might get you back to normal for the moment. Update all plugins/themes/CMS if applicable.

Then hire an expert to fix any security flaws.
 
Out of curiosity, can I ask you what themes & plugins you used? Buying a theme/plugin doesn't make it secure atall. It might still have undisclosed zero day vulnerabilities as @Zwielicht mentioned.

Also, do you have your site visitor log? What do you see there?
 
Gogol said:
Out of curiosity, can I ask you what themes & plugins you used? Buying a theme/plugin doesn't make it secure atall. It might still have undisclosed zero day vulnerabilities as @Zwielicht mentioned.

Also, do you have your site visitor log? What do you see there?
Click to expand...

Somewhere around 53% of ALL plugins for Wordpress are "out of date" and thus likely insecure. And those are just the ones on the official repository.
 
some time ago, some site on some cheap hoster got hacked.
hoster blaimed it on me.. (use antivir and shit)

yeah right. it was a STATIC HTML site..

> hoster kicked out.

a lot of time, it is also the cheap hoster, that causes that trouble. cause THEY dont keep their systems clean!
 
darulez said:
some time ago, some site on some cheap hoster got hacked.
hoster blaimed it on me.. (use antivir and shit)

yeah right. it was a STATIC HTML site..

> hoster kicked out.

a lot of time, it is also the cheap hoster, that causes that trouble. cause THEY dont keep their systems clean!
Click to expand...

Confirmed
 
WP is the most targeted platform on the internet.

If you have a log you would be surprised how many daily attacks you will have from utter noobs that will fill in " admin" as login name, which on my sites you will get banned directly, to advanced hackers.

So far no1 has even come close of getting in but it annoying for sure.

I run Ithemes security and miniOrange 2fa
 
are you acidentally buying an expired domain and when you putting up your content that are totally different from the previous then google will detect the website may be hacked, the word "may be" is just a warning when google noticed differences in their indexing.
 
darulez said:
some time ago, some site on some cheap hoster got hacked.
hoster blaimed it on me.. (use antivir and shit)

yeah right. it was a STATIC HTML site..

> hoster kicked out.

a lot of time, it is also the cheap hoster, that causes that trouble. cause THEY dont keep their systems clean!
Click to expand...
most probably due to the poor ownership permission for the file system. Whenever a client provides me a shared hosting package, I try CDing into the parent folder to see if it is accessible. If it is accessible, it is hackable (given, you have write permission). Try that trick out next time and it will reduce the chance of being sorry later..
 
many possibility, atleast viewing your server log will get you somewhere if not everybody will make stupid assumption for example ftp password,file permissions etc, those kinda hack work well perhaps in year 1999... as now day hack is more complicated..in my experience 80% wp got hacked is because poorly coded themes or plugin (only stupid admin set password with "qwerty" or "admin123456")..even if you set extra difficult password or setup extra secure file permission but if hacker able to launch shell command then is over
 
Thanks all!!!!!!!!!!
My issue is solved in the following ways:
1) backup all content
2) ask the web host to delete the site and re-install
3) import content
Now the alert is gone...
The possible cause might be the "Jetpack premium plugin" of which further research told me that it has the vulnerability..... without installation of it everything seems fine!!!
Once again, thanks all for your input!!!!!
 
tenam said:
Thanks all!!!!!!!!!!
My issue is solved in the following ways:
1) backup all content
2) ask the web host to delete the site and re-install
3) import content
Now the alert is gone...
The possible cause might be the "Jetpack premium plugin" of which further research told me that it has the vulnerability..... without installation of it everything seems fine!!!
Once again, thanks all for your input!!!!!
Click to expand...

Maybe I'm misunderstanding. You backed up a hacked site and reinstalled a hacked site? And now you think it's fine?
 
tenam said:
Google tells "This site may be hacked." my website suffers from “URL Injection” hacked type after research.
What I used are all bought from official website like the theme, plugin....
I found that my webiste is index by google with content not created by me.
something like this: mydomain.com/g12345 where the title is things like "nude,sex..etc..." I never do this....how to fix this issue?
many thanks..
Click to expand...

Contact the official website where you bought the plug in they can help you of what is happening.
 
Billy_Batts said:
WP is the most targeted platform on the internet.

If you have a log you would be surprised how many daily attacks you will have from utter noobs that will fill in " admin" as login name, which on my sites you will get banned directly, to advanced hackers.

So far no1 has even come close of getting in but it annoying for sure.

I run Ithemes security and miniOrange 2fa
Click to expand...

So your security is all on login page, there were and are plenty of wordpress 0days that can easily give access to attacker without having to login to your dashboard.
I'm just saying, that you can easily be owned even though you won't notice.
 
mhgod said:
So your security is all on login page, there were and are plenty of wordpress 0days that can easily give access to attacker without having to login to your dashboard.
I'm just saying, that you can easily be owned even though you won't notice.
Click to expand...
Nope my security is within WP And server-side.
The login I changed to my IP so no more tries there .
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top