1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Website Hacked - Can you Help?

Discussion in 'Black Hat SEO' started by nguyend408, Jan 1, 2013.

  1. nguyend408

    nguyend408 Junior Member

    Joined:
    Nov 15, 2010
    Messages:
    150
    Likes Received:
    29
    So my Better WP Security Plugin has been going off lately. Someone has definitely trying to access my wordpress admin area. Then today I got this - http://www.screencast.com/t/WoALpvL8lA

    It looks like I got files uploaded to my host without permission. I'd really hate to delete my whole host and build another website.

    Can you help?

    Thanks!
     
  2. Smart SEO

    Smart SEO Senior Member

    Joined:
    Apr 17, 2011
    Messages:
    857
    Likes Received:
    759
    Location:
    Google HQ
    There has been a lot of WP hacking recently. I think its due to a loophole in the new update. Did you update your WP version, or was it an automatic update?
     
  3. Endire

    Endire Elite Member Premium Member

    Joined:
    Mar 27, 2012
    Messages:
    1,756
    Likes Received:
    1,061
    Gender:
    Male
    Nguyend,

    Your best bet is to contact your hosting provider and let them know what is happening. Many reputable hosting providers have failsafes in place to help guard against this type of intrusion and should be able to help you fix things without destroying your site. They may also have a backup that you can restore from.

    Maybe you can find some help here,

    http://www.webmonkey.com/2012/04/what-to-do-when-your-website-is-hacked/

    Hope you can get this fixed,

    Shawn
     
    • Thanks Thanks x 1
  4. The Hack Repair Guy

    The Hack Repair Guy Newbie

    Joined:
    Jan 2, 2013
    Messages:
    2
    Likes Received:
    0
    Occupation:
    Website Security Manager
    Location:
    The Internet
    Sadly, most of the websites I've fixed were hacked due to outdated WordPress or plugins or outdated themes installed.

    Hackers are then taking advantage of the situation to inject their hacker back door scripts.

    Suffice it to say, if you aren't checking your blog at least monthly and/or not keeping your blog updated weekly / monthly it's likely you'll be hacked.

    Your best course of action is first contact your host and get them to recover your website from backup.

    Once you have a clean copy in place then run (don't walk) in making sure all your stuff is updated, all user/passwords changed, etc.


     
  5. LakeForest

    LakeForest Supreme Member

    Joined:
    Nov 11, 2009
    Messages:
    1,269
    Likes Received:
    1,802
    Location:
    Location Location
    Is your admin folder in the stereotypical location for a Wordpress install?

    Is your password at least 15 characters long and alpha/numeric/symbol?

    Have you turned off Anonymous FTP access in your CPanel?

    Have you removed user registration?
     
  6. nguyend408

    nguyend408 Junior Member

    Joined:
    Nov 15, 2010
    Messages:
    150
    Likes Received:
    29
    Thanks for all the help guys!