Website countinuosly hacked

  • Resolved MescalinaCreative

    (@mescalinacreative)


    7 years ago

    Hello. The scan finds nothing but my site got hacked for the third time in a month… what should I do??

Viewing 4 replies - 1 through 4 (of 4 total)
  • Joel Masci

    (@joelmasci)

    Scans might not always find stuff in your theme folder, or in plugins that are not official plugins. Apart from the usual (which i’m sure if you search the WordFence site you will find generic instructions for cleanup), I would them the theme and plugin files for anything suspicious.

    wfyann

    (@wfyann)

    Hi @mescalinacreative,

    Have you tried following steps outlined in our site cleaning guide?

    carlaasf

    (@carlaasf)

    I have got my sites hacked too and luckily I had wordfence installed which send me an email with a detail of warnings:
    Warnings:

    * Unknown file in WordPress core: wp-admin/css/colors/blue/index.htm

    * Unknown file in WordPress core: wp-admin/css/colors/coffee/index.htm

    * Unknown file in WordPress core: wp-admin/css/colors/ectoplasm/index.htm

    * Unknown file in WordPress core: wp-admin/css/colors/index.htm

    * Unknown file in WordPress core: wp-admin/css/colors/light/index.htm

    * Unknown file in WordPress core: wp-admin/css/colors/midnight/index.htm

    * Unknown file in WordPress core: wp-admin/css/colors/ocean/index.htm

    * Unknown file in WordPress core: wp-admin/css/colors/sunrise/index.htm

    * Unknown file in WordPress core: wp-admin/css/index.htm

    * Unknown file in WordPress core: wp-admin/images/index.htm

    * Unknown file in WordPress core: wp-admin/includes/index.htm

    * Unknown file in WordPress core: wp-admin/index.htm

    * Unknown file in WordPress core: wp-admin/js/index.htm

    * Unknown file in WordPress core: wp-admin/js/widgets/index.htm

    * Unknown file in WordPress core: wp-admin/maint/index.htm

    * Unknown file in WordPress core: wp-admin/network/index.htm

    * Unknown file in WordPress core: wp-admin/user/index.htm

    * Unknown file in WordPress core: wp-includes/ID3/index.htm

    * Unknown file in WordPress core: wp-includes/IXR/index.htm

    * Unknown file in WordPress core: wp-includes/Requests/Auth/index.htm

    * Unknown file in WordPress core: wp-includes/Requests/Cookie/index.htm

    * Unknown file in WordPress core: wp-includes/Requests/Exception/HTTP/index.htm

    * Unknown file in WordPress core: wp-includes/Requests/Exception/Transport/index.htm

    * Unknown file in WordPress core: wp-includes/Requests/Exception/index.htm

    * Unknown file in WordPress core: wp-includes/Requests/Proxy/index.htm

    * Unknown file in WordPress core: wp-includes/Requests/Response/index.htm

    * Unknown file in WordPress core: wp-includes/Requests/Transport/index.htm

    * Unknown file in WordPress core: wp-includes/Requests/Utility/index.htm

    * Unknown file in WordPress core: wp-includes/Requests/index.htm

    * Unknown file in WordPress core: wp-includes/SimplePie/Cache/index.htm

    * Unknown file in WordPress core: wp-includes/SimplePie/Content/Type/index.htm

    * Unknown file in WordPress core: wp-includes/SimplePie/Content/index.htm

    * Unknown file in WordPress core: wp-includes/SimplePie/Decode/HTML/index.htm

    * Unknown file in WordPress core: wp-includes/SimplePie/Decode/index.htm

    * Unknown file in WordPress core: wp-includes/SimplePie/HTTP/index.htm

    * Unknown file in WordPress core: wp-includes/SimplePie/Net/index.htm

    * Unknown file in WordPress core: wp-includes/SimplePie/Parse/index.htm

    * Unknown file in WordPress core: wp-includes/SimplePie/XML/Declaration/index.htm

    * Unknown file in WordPress core: wp-includes/SimplePie/XML/index.htm

    * Unknown file in WordPress core: wp-includes/SimplePie/index.htm

    * Unknown file in WordPress core: wp-includes/Text/Diff/Engine/index.htm

    * Unknown file in WordPress core: wp-includes/Text/Diff/Renderer/index.htm

    * Unknown file in WordPress core: wp-includes/Text/Diff/index.htm

    * Unknown file in WordPress core: wp-includes/Text/index.htm

    * Unknown file in WordPress core: wp-includes/certificates/index.htm

    * Unknown file in WordPress core: wp-includes/css/index.htm

    * Unknown file in WordPress core: wp-includes/customize/index.htm

    * Unknown file in WordPress core: wp-includes/fonts/index.htm

    * Unknown file in WordPress core: wp-includes/images/crystal/index.htm

    * Unknown file in WordPress core: wp-includes/images/index.htm

    * Unknown file in WordPress core: wp-includes/images/media/index.htm

    * Unknown file in WordPress core: wp-includes/images/smilies/index.htm

    * Unknown file in WordPress core: wp-includes/images/wlw/index.htm

    * Unknown file in WordPress core: wp-includes/index.htm

    * Unknown file in WordPress core: wp-includes/js/codemirror/index.htm

    * Unknown file in WordPress core: wp-includes/js/crop/index.htm

    * Unknown file in WordPress core: wp-includes/js/imgareaselect/index.htm

    * Unknown file in WordPress core: wp-includes/js/index.htm

    * Unknown file in WordPress core: wp-includes/js/jcrop/index.htm

    * Unknown file in WordPress core: wp-includes/js/jquery/index.htm

    * Unknown file in WordPress core: wp-includes/js/jquery/ui/index.htm

    * Unknown file in WordPress core: wp-includes/js/mediaelement/index.htm

    * Unknown file in WordPress core: wp-includes/js/mediaelement/renderers/index.htm

    * Unknown file in WordPress core: wp-includes/js/plupload/index.htm

    * Unknown file in WordPress core: wp-includes/js/swfupload/index.htm

    * Unknown file in WordPress core: wp-includes/js/thickbox/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/langs/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/plugins/charmap/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/plugins/colorpicker/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/plugins/compat3x/css/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/plugins/compat3x/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/plugins/directionality/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/plugins/fullscreen/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/plugins/hr/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/plugins/image/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/plugins/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/plugins/link/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/plugins/lists/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/plugins/media/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/plugins/paste/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/plugins/tabfocus/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/plugins/textcolor/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/plugins/wordpress/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/plugins/wpautoresize/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/plugins/wpdialogs/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/plugins/wpeditimage/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/plugins/wpemoji/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/plugins/wpgallery/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/plugins/wplink/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/plugins/wptextpattern/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/plugins/wpview/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/skins/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/skins/lightgray/fonts/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/skins/lightgray/img/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/skins/lightgray/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/skins/wordpress/images/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/skins/wordpress/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/themes/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/themes/inlite/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/themes/modern/index.htm

    * Unknown file in WordPress core: wp-includes/js/tinymce/utils/index.htm

    * Unknown file in WordPress core: wp-includes/pomo/index.htm

    * Unknown file in WordPress core: wp-includes/random_compat/index.htm

    * Unknown file in WordPress core: wp-includes/rest-api/endpoints/index.htm

    * Unknown file in WordPress core: wp-includes/rest-api/fields/index.htm

    * Unknown file in WordPress core: wp-includes/rest-api/index.htm

    * Unknown file in WordPress core: wp-includes/theme-compat/index.htm

    * Unknown file in WordPress core: wp-includes/widgets/index.htm

    This was done by some nasty criminals called “Dark Pinus Squad” apparently appeared to be from Indonesia, Yakarta ??

    wfyann

    (@wfyann)

    Hi @mescalinacreative,

    Have you been able to locate the source of the infection?

    Keep in mind the hack could be happening at server level; and even if your site is not directly compromised at first, an attacker could gain access via another infected site hosted on the same server in case proper account isolation hasn’t been implemented.

    It could also be an infection of this type.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Website countinuosly hacked’ is closed to new replies.