jtoronto

There is another thread on this today and numerous posts on Twitter and the net about this hack which just started surfacing a few days ago..

“hacked by hacker”

To fix this you need to get the following 2 files back:
index.php in the root folder (get it from the default WordPress install) and header.php in your themes folder (if you don’t have a backup of that file you will need to start with the original from the theme). Also remove index.html which is created because the hack affects none WordPress sites as well/

That said I think you may get hacked again because it is unclear how they are doing it at the moment.

No you need to fix it yourself. That said if you are hosted with HostPapa according to their support department there was a security breach last night. But they are not saying much else.

To fix this you need to get the following 2 files back:
index.php in the root folder (get it from the default WordPress install) and header.php in your themes folder (if you don’t have a backup of that file you will need to start with the original from the theme). Also remove index.html which is created because the hack affects none WordPress sites as well/

I do think there is a larger security / vulnerability issue going on with this hack but we may have to wait for more reports.

A couple of HostPapa.com servers had hundreds of websites hacked like this today simultaneously across multiple accounts and multiple servers..

Also there are reports on Twitter from many other people as well on other hosts .. all today. So I have a feeling that there is a bigger problem here.

The index.php file gets changed to “hacked by Hacker” and the header.php file in the theme folder also gets changed to the same thing … and index.html file also gets added.

This happened on an up-to-date minimal WordPress install with no plugins and the classic theme so not sure how it is happening. Almost seems like an issue with the host or server itself?