Signs your site may be hacked include strange redirects, spam pages showing in Google, warnings in your browser, pages you didn't create, or a warning email from us. Act quickly, and follow these steps.
1. Don't Panic, and Don't Delete Everything
You'll want evidence of what happened, and a clean backup is your best friend.
2. Change Your Passwords
Change all of these, using new strong passwords:
- Your Client Area password
- Your cPanel password (see How to Change Your cPanel Password)
- All WordPress admin passwords, and remove any admin users you don't recognise
- FTP account passwords, and delete any you don't use
3. Scan for Malware
Run a scan with Imunify360 and clean up what it finds. See How to Scan Your Website for Malware.
4. Restore a Clean Copy
If you know roughly when it happened, restoring files and database from before then is often the quickest fix. See How to Restore Files With JetBackup.
5. Close the Hole
Most hacks come through out-of-date plugins or themes. After cleaning up:
- Update WordPress, plugins and themes
- Delete plugins and themes you don't use
- Remove any "nulled" or pirated plugins, which often contain malware
See How to Keep WordPress Updated and Secure.
6. Check Google
If Google shows a warning, sign up for free Google Search Console, check the Security issues section, and request a review once your site is clean.
Need Help?
Open a ticket with Technical Support. We can help identify the infected files and restore a clean backup.
