My website got hacked.. What should I do? [closed]

by

Try and gather as much information as you can. See if the host can give you a log showing all the FTP connections that were made to your account. You can use those to see if it was even an FTP connection that was used to make the change and possibly get an IP address.

If you’re using a prepacked software like WordPress, Drupal, or anything else that you didn’t code there may be vulnerabilities in upload code that allows for this sort of modification. If it is custom built, double check any places where you allow users to upload files or modify existing files.

The second thing would be to take a dump of the site as-is and check everything for other modifications. It may just be one single modification they made, but if they got in via FTP who knows what else is up there.

Revert your site back to a known good status and, if need be, upgrade to the latest version.

There is a level of return you have to take into account too. Is the damage worth trying to track the person down or is this something where you just live and learn and use stronger passwords?

More Related Contents:

  1. Difference between Hashing a Password and Encrypting it
  2. In what cases will HTTP_REFERER be empty
  3. XMLHttpRequest cannot load file. Cross origin requests are only supported for HTTP
  4. Why Does OAuth v2 Have Both Access and Refresh Tokens?
  5. Practical non-image based CAPTCHA approaches?
  6. What is the best way to prevent session hijacking?
  7. How to restrict Firebase data modification?
  8. Why is security through obscurity a bad idea? [closed]
  9. The necessity of hiding the salt for a hash
  10. Classic ASP SQL Injection Protection
  11. Will HTML Encoding prevent all kinds of XSS attacks?
  12. How are software license keys generated?
  13. How to properly do private key management
  14. Symfony2 extending DefaultAuthenticationSuccessHandler
  15. Are Google Cloud Functions protected from DDoS attacks?
  16. OAuth2 and Google API: access token expiration time?
  17. md5 decoding. How they do it?
  18. What is the best Distributed Brute Force countermeasure? [closed]
  19. What is a retpoline and how does it work?
  20. https URL with token parameter : how secure is it?
  21. SSL Error: unable to get local issuer certificate
  22. Is it OK to return a HTTP 401 for a non existent resource instead of 404 to prevent information disclosure?
  23. Why not use MD5 for password hashing?
  24. How to pass the value of a variable to the standard input of a command?
  25. How to manually decrypt an ASP.NET Core Authentication cookie?
  26. Use App Scripts to open form and make a selection
  27. How does ASN.1 encode an object identifier?
  28. Remember me Cookie best practice?
  29. buffer overflow example from Art of Exploitation book
  30. Am I under risk of CSRF attacks in a POST form that doesn’t require the user to be logged in?

Leave a Comment