Website Been Hacked

[chess]

Wordpress eh? Even script-kiddies can hack them while chewing popcorn.
Did your client use SSL? If not now it's the time to get one. There is also a script called crawlprotect or something that I used long ago. Well not 100% effective but definitely good enough to shoo away script-kiddies.

 

[King Kong]

One shouldn't forget to proxy your servers IP to add an extra layer of cover to your project hosting - Cloudflare could be a place to check out !

 

[Bashox]

Use sucuri anti malware plugin

 

[King Kong]

Use sucuri anti malware plugin

Sure why not but ...

 

[biscuit]

Sure why not but ...

You are looking at something else. Find the plugin below.

Sucuri Security – Auditing, Malware Scanner and Security Hardening

The Sucuri WordPress Security plugin is a security toolset for security integrity monitoring, malware detection and security hardening.

wordpress.org

 

[King Kong]

You are looking at something else. Find the plugin below.

Sucuri Security – Auditing, Malware Scanner and Security Hardening

The Sucuri WordPress Security plugin is a security toolset for security integrity monitoring, malware detection and security hardening.

wordpress.org

You are right @gopo I use the Plugin link that you shared but the real benefit after monitoring is when the Malware is found and we need someone to remove them... Either one has to use the old backups after ideally finding the clean state of website code OR you end up paying to use Sucuri's Security services.

- The best way I feel is to secure the perimeter to the best possible
- Keep scheduled backups each change possible
- Once you find a Malware go and hunt the date to restore Backup (Database is yet another story)
- One must keep a watch on loose canon balls : The unID'd Users with Admin rights.

Correct me if wrong.