Hi @ambaliyaharesh, I’m sorry to hear about the malware attack on your site. I recommend contacting a malware removal service (like Sucuri)?as soon as possible. Once you have recovered your site, it would be best to ask how the hack happened to prevent it from occurring again. I would also recommend looking into a server-side firewall to prevent backdoor attacks from the server, as the Qak Bot attack is a backdoor-type attack.
iThemes Security hardens your WordPress application, but it can’t guarantee against an attack, and neither can anything else. You may enable the File Change detection feature of iTSec, so if you see unexpected file changes, you can compare the files to an older version in your recent backup to see the changes. You can also enable the User Logging feature to help you monitor user activities on the site.
I hope this helps, and please let me know if you need further assistance.
