wp site got hacked by malware

G

guhuuljot

Registered Member
Joined
Aug 8, 2020
Messages
69
Reaction score
16
yesterday suddenly my wp site admin page was not loading.

i checked my site, then i found some links changed to a strange page which I didn't put on.

i contacted hosting company and they said my sites are compromised by malware.

wtf!

it was a very small site with a few page, so it was not a big deal but what i concern is:

how can i protect my sites with this mother fuckers?

i never installed cracked plugins or themes. all basic free from wp.

can this be a problem with a hosting company?

how can I scan and protect from this malwares?
 
Advertise on BHW
it was probably a bug in a plugin, it happens all the time.

I use a security plugin WP-Cerber. IMO it is the best one for security because it doesn't slow down your site.

Also, most plugins have a database of IPs that are known to be malicious and filter that. WP-Cerber has a database of "suspicious traffic", so even if someone comes from a fresh IP address that is not blacklisted anywhere, they will be still blocked if they try to access something like /wp-plugins/somename/common-exploit.php
 
If I could give you one advise that made my life a heck lot easier, stop using wp as a frontend (or better yet, stop using it completely if you can create a custom backend). Use a static site generator like nextjs or hugo. You will thank yourself later.
 
Gogol said:
If I could give you one advise that made my life a heck lot easier, stop using wp as a frontend (or better yet, stop using it completely if you can create a custom backend). Use a static site generator like nextjs or hugo. You will thank yourself later.
Click to expand...
Or just disconnect to Internet.
 
RoiBox said:
Or just disconnect to Internet.
Click to expand...
Trust me, it is very easy to make a site with nextjs. Atleast far easier than wp themes, that is for sure. Try it out bro ;)
 
Just stop using wordpress! Stick to html + php and it works!
WP is just a security nightmare!
 
Gogol said:
Trust me, it is very easy to make a site with nextjs. Atleast far easier than wp themes, that is for sure. Try it out bro ;)
Click to expand...
Some day I might be forced to, have not coded since php took over asp, a lot of years back .. =)
 
Do you know that WP usually issues an update because vulnerabilities? The hackers take advantage from there. Or they can scan your ID or password. Firstly let’s use good password, then update your theme and plugin usually
 
make sure your plugins are up to date and use a secure password, the author's name/login id can be extracted from WordPress quite easily.
 
Keep your site up to date.
Use a strong password for wp.
Change login url.
Back up regularly and keep archival copies.
Use a host that includes malware scanning so that, at least you’ll get notified, if the site is compromised and then you can restore from a backup.

That’s all you can do to protect against hackers.
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top