RuLLezZ

Forum Replies Created

Viewing 4 replies - 1 through 4 (of 4 total)
  • Forum: Fixing WordPress
    In reply to: Hack redirection to Japanese site
    Thread Starter RuLLezZ

    (@rullezz)

    5 years, 10 months ago

    We tried to delete all the scripts/folders/files from the website, we scan it with Wordfance, clean also wordpress files that was modified with scripts. Then scan it again to be sure.
    The website started working again normally, but after some time 3-4 hours they were hacked again with different scripts were installed on each site and in different places.

    Then we tried to use the backup, but it didn’t help.

    • This reply was modified 5 years, 10 months ago by RuLLezZ.
    Forum: Fixing WordPress
    In reply to: Hack redirection to Japanese site
    Thread Starter RuLLezZ

    (@rullezz)

    5 years, 10 months ago

    Maybe this will help you to understand where is a hole and how can be fixed.

    1. Scripts: xnikx68min.php / Thumbs.php / coment. In wp-content folder. (inside of xnikx68min was written “Indonesian hackrs” )
    2. This link give full access to the website: /wp-admin/1337.php
    3. They chenge/put files in Akismet plugin
    4. Beleve me an more and more.. things in theme and plugin folders and etc, anyway.
    5. Redirection to the one Japanese site jcdizefc . online (this happens when you use google search with an keyword or just with brand name, also at right side at Google My Business.
    6. Most of website are full updates exept 1-2
    7. We using 7.0.5 php version on all websites
    8. Protection provided by custom platform for managemant websites
    9. We don’t use plugins like Worfance 24/7, but only for scan.

    Forum: Fixing WordPress
    In reply to: Hack redirection to Japanese site
    Thread Starter RuLLezZ

    (@rullezz)

    5 years, 10 months ago

    We using our custom platform something like cpanel where we can see all our websites and work on it, platform hosted at OVH.

    Forum: Fixing WordPress
    In reply to: Hack redirection to Japanese site
    Thread Starter RuLLezZ

    (@rullezz)

    5 years, 10 months ago

    Bro we recover every site, the problem is the hole. Because after we clean everything in some hours it happens again.
    All themes/plugins/wordpress are updated and we can’t found anything in google about attack for this period of time. 20 July till today.
    It is possible to be hacked from hosting/ftp/etc?

    • This reply was modified 5 years, 10 months ago by RuLLezZ.
Viewing 4 replies - 1 through 4 (of 4 total)