Wordpress has been hacked...HELP

Discussion in 'BlackHat Lounge' started by Scotland, Apr 27, 2013.

  1. Scotland

    Scotland Regular Member

    Joined:
    Apr 4, 2009
    Messages:
    379
    Likes Received:
    204
    Occupation:
    Student
    Location:
    On Way To Personal Legend
    Hey

    I thought the servers were down earlier, but my wordpress must be hacked.

    When i type in the main domain name i get this landing page... hack1.jpg

    A pop up then come up showing taking me here.... hack2.jpg
    I deleted wordpress, checked the site and i was at hostgator landing page.

    I installed wordpress again and returned to the above landing page.

    Any ideas? This was all fine 18 hours ago.
     
    Last edited: Apr 27, 2013
  2. Duffers5000

    Duffers5000 Elite Member

    Joined:
    Apr 1, 2012
    Messages:
    2,475
    Likes Received:
    7,704
    Like I said in your first thread, contact Hostgator straight away and they will fix it.
     
  3. TheMasterOfMoney

    TheMasterOfMoney Jr. VIP Jr. VIP

    Joined:
    May 22, 2010
    Messages:
    804
    Likes Received:
    1,427
    Home Page:
    Did you used a nulled theme?
     
  4. gsy159

    gsy159 Power Member

    Joined:
    Apr 29, 2011
    Messages:
    698
    Likes Received:
    168
    If you want help send me a PM with your site URL, I had this problem also last month
     
    • Thanks Thanks x 3
  5. Scotland

    Scotland Regular Member

    Joined:
    Apr 4, 2009
    Messages:
    379
    Likes Received:
    204
    Occupation:
    Student
    Location:
    On Way To Personal Legend
    i did, they argued it was propogating and i had to beg them to scan it, no results yet
     
  6. Scotland

    Scotland Regular Member

    Joined:
    Apr 4, 2009
    Messages:
    379
    Likes Received:
    204
    Occupation:
    Student
    Location:
    On Way To Personal Legend
    yes but it worked ok for a while
     
  7. Scotland

    Scotland Regular Member

    Joined:
    Apr 4, 2009
    Messages:
    379
    Likes Received:
    204
    Occupation:
    Student
    Location:
    On Way To Personal Legend
    Big thanks to gsy159 for helping me out there.

    Had redirect in .htaccess file.
     
  8. The Scarlet Pimp

    The Scarlet Pimp Senior Member

    Joined:
    Apr 2, 2008
    Messages:
    972
    Likes Received:
    3,460
    Occupation:
    Chair moistener.
    Location:
    Cyberspace
    was it the theme? if it was, which one had the trojan...
     
  9. Scotland

    Scotland Regular Member

    Joined:
    Apr 4, 2009
    Messages:
    379
    Likes Received:
    204
    Occupation:
    Student
    Location:
    On Way To Personal Legend
    well, it looked like it was in the twentytwelve one. But im convinced it was the evid theme i got from the downloads section!!. Worked fine until that one was in
     
  10. Untouchable

    Untouchable Supreme Member

    Joined:
    Mar 22, 2012
    Messages:
    1,345
    Likes Received:
    1,177
    Location:
    Canada
    I am getting attacked very single day constantly. Install login lockdown and dont use admin ad your username.