Have You Been Hacked?

Step 1: Identifying the Hack

Before taking action, we assess the scope of the hack. we look for:

• Unusual redirects or pop-ups
• Google warning messages about malware
• Defaced website pages
• Unexpected new admin users
• Suspicious files in your hosting account
• High resource usage slowing down your site

Step 2: Putting Your Site in Maintenance Mod

If your site is severely compromised, we place it in maintenance mode to prevent further damage to visitors. We use tools like WP Maintenance Mode or temporarily deactivate the site via cPanel.

Step 3: Backing Up Your Website

Before making changes, we back up your entire site, including files and the database. We use reliable backup solutions or download backups directly via your hosting provider.

Step 4: Scanning and Removing Malware

• Using trusted security tools we scan your site.
• We check recently modified files via FTP and/or File Manager in cPanel.
• We manually review suspicious files in wp-content/themes/, wp-content/plugins/, and wp-content/uploads/.
• We delete any unknown or outdated themes and plugins.

Step 5: Resetting All Passwords

We ensure all passwords are reset, including:

• WordPress admin
• Hosting account (cPanel, Plesk, or DirectAdmin)
• Database (updating wp-config.php accordingly)
• FTP/SFTP access
• Any other connected services

Step 6: Restoring Clean Versions of Core Files

We reinstall WordPress core files:

1. Download the latest WordPress version from wordpress.org.
2. Replace everything except wp-config.php and wp-content/.
3. Delete or restore default .htaccess and regenerate via WordPress permalinks settings.

Step 7: Checking and Cleaning the Database

Using phpMyAdmin, we:

1. Remove unknown admin users from wp_users
2. Delete suspicious entries in wp_options, wp_posts, and wp_comments.
3. Search for malicious code like eval or base64_decode.

Step 8: Reinstalling and Updating Themes & Plugins

1. We delete and reinstall all plugins and themes from official sources.
2. We remove any unused or outdated plugins/themes.
3. We ensure everything is updated to the latest versions.

Step 9: Implementing Strong Security Measures

Cybersecurity demands continuous vigilance and adaptation. That’s why our WordPress developers prioritize security at every stage of website development and why we created Shieldwall, our advanced WordPress security solution.

Safeguarding your data and protecting your reputation are our top priorities.

Step 10: Requesting Google Review (If Blacklisted)

If your site is blacklisted, we help you request a review:

• Accessing Google Search Console.
• Checking Security Issues and following the removal process.
• Submitting a reconsideration request once your site is clean.

Step 11: Monitoring Your Site Regularly

Once your site is restored, we take proactive measures to prevent future attacks:

• Setting up automated backups (daily or weekly)
• Running regular security scans
• Keeping WordPress core, themes, and plugins updated
• Enabling activity logs to track changes