I was Hacked And Need Help With This Mess

  • Unknown's avatar
    avearemens · Member ·

    Hello, everybody. I have been making a website for a client. Sometime in the past 15 days (I do not know exactly when), someone somehow put a phishing script of sorts in my WordPress files. The host provider reset the page to 09/24/17, the time where we are certain there was no infection. After changing all of our CPanel and WordPress admin passwords, I was determined to solve this problem. Google also blacklisted my site and removed the certificate of the site. I verified that I was the sole owner and wrote them a review ticket for manual inspection. Problem is, I had no idea I was being hacked at the time and so I told them there wasn’t a problem. This was yesterday.

    I downloaded a back up of the infected files before they were taken down and got to searching. I searched through most of the code and found nothing. I ran 3 virus scanners on the files and they found nothing.

    Here is where things get weird. I tried logging into the restored version to hopefully find an antivirus plugin to run to ensure that the restored code was secure, but my admin credentials were not working. Upon inspection of the database through CPanel, I discovered that one of my admin accounts was deleted and the original admin account had his password changed. I do not know if that was the hosting provider. If it is not I am in deep, deep trouble.

    It gets even weirder. After putting in the correct credentials, I still cannot log in. It says my login credentials are still invalid. Could this be because the website is not secure since it’s missing the certificate?

    How can I enter the restored version of my wordpress site? Must I wait for Google to give me back the certificate? Is there any chance of fixing the current version I have stored on my computer? How do I go about doing that so I don’t lose any progress?

    I am very new at this and this has never happened before. My client is breathing down my neck. Help?

    The blog I need help with is: (visible only to logged in users)

  • Unknown's avatar
    avearemens · Member ·

    I apologize, the blog I need help with is:

    cvmauto.com. This is just a static picture.

    The wordpress is on a subdirectory cvmauto.com/wordpress.

    Thanks.

  • Unknown's avatar
    vishalmukadam · Member ·

    Hi @avearemens,

    The site which you’ve mentioned above cvmauto.com. is using self-hosted version of WordPress which is free and open-source software available at WordPress.org

    This forum is dedicated to the sites hosted on WordPress.com so I would request you to ask to create a new thread at the WordPress.org Forum
    Link here:
    https://wordpress.org/support/

    To know the difference between click here
    WordPress.com Vs WordPress.org

    Best Wishes.

  • Unknown's avatar
    vishalmukadam · Member ·

    Correction
    This forum is dedicated to the sites hosted on WordPress.com so I would request you to create a new thread at the WordPress.org Forum
    Link here: https://wordpress.org/support/

    And for starting a new thread there you’ll have to create account at WordPress.org

  • The topic ‘I was Hacked And Need Help With This Mess’ is closed to new replies.