Possible new hack CHEMOD 77

  • daveburstein

    (@daveburstein)


    5 years, 4 months ago

    Got hacked about 90 minutes ago. Defaced hacked by chemod 77. Google search shows it is rapidly spreading but finds little information. Standard security scans don’t have details.
    Rapidly spread through 6 sites on same server, 3 joomla, 3 WordPress.
    Advice needed:
    1- Blocks wp-admin with hack screen. To get to my security software, I need to get in. Any ideas how to bypass. All files are there in ftp, look right?
    2- Other advice?

    Puts in an index.php file beginning like this. When I delete it, still hacked. Am checking database for odd files.

    [hack code removed]

    • This topic was modified 5 years, 4 months ago by James Huff. Reason: hack code removed

    The page I need help with: [log in to see the link]

Viewing 2 replies - 1 through 2 (of 2 total)
Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Possible new hack CHEMOD 77’ is closed to new replies.