Website hacked

AdamBerg

One of my websites has a nice hacked message on it.

It is probably due to a few reasons but I have a lot of contact with companies in china, lets say because of review items! It seems like it is one of them. They all had my website link. It's a site I don't use often but would direct them to it so not to clog up my other websites.

As I got bored of reviewing and so on, I stopped logging into my own site or viewing it so it's been sitting there. I thought I'd login today but saw their hacked message.

As I mentioned I have other sites. There is one I also left to sit doing nothing but that one hasn't been hacked and they didn't have the link for that one.

They're both with the same hosting company who basically leave you to it, no support etc.

My question is, what do I do from here? I can start over with the website but I don't have knowledge regarding hacking. I'm not sure what is currently safe or not safe for me to do. I can see my wordpress admin login page with their hacked name so not sure I should even login to that. I probably can't if they removed me.

Has anyone got any tips? I don't want to accidentally download a virus or something. Silly me.

System

Change the log in details, restore your website from one of your back ups or create a fresh one.

Neil_Jones

this may not be a "hack" as such, if you use out of date scripts that you haven't bothered to update regularly (forum scripts and blogs for example) they may have security vulnerabilities which are exploitable.

Of course now you've mentioned Wordpress, I bet you left the admin folder and used the default username and password (which is typically admin and no password) to set it up. That folder should be removed (or renamed) and never stick with the default usernames and passwords for anything.

S0litaire

As it is a "Wordpress" site, If you manage to log back in install the "Wordfence" plugin.

https://www.wordfence.com/

Its a great security scanner with a free & paid versions, the free one will do for most cases. It will do scans of all wordpress files and logins and stop the worst of the "hacking" logins and scripts.

Stick your website address in here to see if its an actual "login" hack or just a script which you can easily remove.

https://www.gravityscan.com/

DoaM

chbary wrote: »

Hi I am a professional wordpress developer who has decided to :spam: your thread,

Thanks.

Touting for business is not allowed on MSE.