I got Hacked. Are you protected?

by 61 replies
66
Last week I received an email from Google saying one of my sites had been hacked. Sure enough when I checked there had been around 50 posts added to my website.

When I checked my other sites on the shared web hosting plan I found that they had also been hacked. Out of fear of someone visiting one of my sites and being affected by this mess I just deleted everything.

Now everything I have worked on for 2 years is gone and I am not sure if I will try again.

My question is, Since Google has already flagged my domains as being unsafe is the any way I can use the domain again? Also what is the best way to protect your site against these hackers?

Folks, Do yourselves a favor and guard yourselves against these terrible people, It hurts like heck to have to hit that delete button!

Have a blessed day!
#off topic forum
  • That's tough.

    Not sure about using the same domain but:

    - use a reputable, higher end hosting solution
    - use a strong password for your admin
    - use https
    - use Cloudflare
    • [ 3 ] Thanks
  • Too bad, nobody is safe on the internet, I hate that
    • [ 1 ] Thanks
    • [1] reply
    • Everyone is safe on the internet if they know what they are doing.
      Getting hacked is rather hard at this day & age.
      If you follow a small set of rules you dont usually get hacked.
      There are these small instances of getting hacked, but they are usually happening to those that didn't protect themselves.
  • This is something to implement BEFORE disaster strikes, so that it never will. Additionally, who, these days, doesn't keep 30 days of rolling backups of all of their websites and have them automatically uploaded to Dropbox?

    Sorry for your loss, but . . . . . . . it's 2018. Get with the program.
  • Why didn't you hire someone to clean it up?
    • [ 1 ] Thanks
  • I only use VPN and strong password, do i need something else?
    • [2] replies
    • There are thousands of resources on the Internet and hundreds of products that can help you protect your websites. I'm guessing that you probably want to do things as close to free as possible.

      Good luck with that. You get exactly what you pay for in life - and business.

      Google is your friend: "Website hacking prevention." About 79,600,000 results (0.84 seconds)

      It's a start. lol

      If you are willing to spend a small amount of money for world-class, 'hack-proof' hosting, contact WF member Vikash at: support [at] wpfixy [dot] com. He'll hook you up. I am not an affiliate. I work for a living. :-) Well, I used to, anyway.
      • [ 1 ] Thanks
    • Banned
      [DELETED]
    • Do not use nulled theme or plugin or anything nulled on your website
  • I lost one of my websites a few years back. It was devastating. Sorry you went through that. Hopefully, you can turn it into a learning experience and press on.
    • [ 2 ] Thanks
  • That's a crying shame - sorry this happened to you - it's important to maintain and update a website at least once a week - at the very least back up your data! that way you can restore your site if someone hacks it
    • [ 1 ] Thanks
  • One thing I learned is that once you are connected to the internet, all the information you have in your computer is available elsewhere. I may not save my files in the cloud but who knows what these days?
  • I would suggest

    1) First Clean Up the unnecessary posts from your site
    2) May try to restore your site from last day. if not much has been added by you
    3) Change to more secure good hosting - This is what mostly all of us Lack
    4) Always Always have a strong DB/Site/SQL/WP Passwords - This is the most weakest point among all of us
    5) If site based on WP do have secure WP Plugin installed
    6) Can have a Daily Malware, Vulnerability, scanner
    7) Keep your website software updated to latest version always


    I Hope all this will help to regain website
    • [ 2 ] Thanks
  • [DELETED]
  • I hope you'll soon get back up to your feet.

    Always make it a point to back up your site data so you can reupload it when you need to.
    • [ 1 ] Thanks
  • Always backup your site
    Use a Strong Password
    Install Wordfence if you use WordPress
    Cloudflare

    This is what I do
    • [ 1 ] Thanks
  • It looks like this particular question has not been answered yet.

    Once the issue has been handled, you can make a Google Search Console account (if you do not already have one) and request for the site to be reviewed again.
  • try google security resources.
    • [ 1 ] Thanks
  • I hope you're recovering A-OK buddy. This stings. I'd add; don't allow the hack to make you gun-shy. Folks tend to pull back and struggle after hacking, fearing that moving forward boldly exposes them to more hacks. Take precautions, then go for it.
    • [ 1 ] Thanks
  • Sorry you went through that
    • [1] reply
    • We already have a WF emotional support forum.
  • Sometimes your host backups your data for you, did you asked the supports?
    • [ 2 ] Thanks
  • [DELETED]
  • [DELETED]
  • To protect yourself, you should use something like KeePass.

    I don't think you would be able to fix that domain tho.
  • Protecting yourself is easy. Use password protectors.

    The domain issue can be fixed if you contact google saying you just bought the domain.
    • [ 1 ] Thanks
  • [DELETED]
  • Banned
    [DELETED]
    • [ 1 ] Thanks
  • Hi
    Is your website is in wordpress?
    if yes i am working on wp plugin to protect your site.
    i am a website security consultant
    Hit reply to me!
    Thankss
    • [ 1 ] Thanks
  • [DELETED]
  • Just in case this happens again to you, I'd like to suggest that you should not delete everything. If someone managed to log into your site as an admin to all of your sites, then you probably could have changed the password to a much stronger one, and then cleaned up the posts. Even if that was not the case, and the hack too place at a higher level (like someone gained admin/root access to the server itself and therefore ALL sites on the server), then it's unlikely that any files would have been inserted in your site folders that would facilitate the hack. And anyway, a competent security professional could have easily found such files if that were the case. If you are really talking about two years of work (or more, for anyone reading this who has more years of work to protect), I can't think of a reason to "delete everything" no matter what happened. Of course, backups of the files are important, but with [cheap] shared hosted plans, I understand that this may be difficult. Finally, there are a whole bunch of answers on this thread related to personal security of your laptop, etc. etc. and while that certainly is relevant if you are the victim of a keylogger app, for the most part, if you run websites, you need to be concerned mainly with the server the site is hosted on, not specifically your desktop computer. If you are starting over and using a shared plan, you should ask about the version of hosting software (like WordPress), and how often its updated, and about backups. With a solid backup performed on a daily/weekly basis, you can recover from most disasters.
    • [ 1 ] Thanks
  • Oh, and sorry - I meant to address the other question regarding whether you can use the domain again. Yes, you certainly can. The domain has nothing to do with where it's hosted - at least not technically. So if you own the domain (which essentially means you have the username and password to the Registrar, like GoDaddy, etc.), and you have control over DNS, then you can "point" the domain to whatever server/service you like. So the 'domain' wasn't actually hacked, the files that lived on the server that the domain was pointing to were hacked. This can change in minutes, if you have access to the Domain Name System management console, either at your Registrar's website, or a DNS management site, if that's what you are using.
    • [ 1 ] Thanks
  • in my personal opinion, no one can prevent that but we can complicate it with ssl even though in the end it can still be hacked
  • That's really sad.
    That's why I started to use secured email and messenger.
    We all have risk to have our data leaking.
  • yeah that is not good news. Sounds like you did not have backups - hard lesson learned.

    We've all been there at one point with domains, and if you've had domains and websites for a while then you know this to be true. It is especially bad, when you buy the cheap hosting plans and get on a shared server.

    Slow bandwidth and hacking threats a plenty. That is why it is cheap.

    Cloudflare will help with the DDOS attacks and malware too, but you must always make a BACKUP of your site.

    When it is new, not after it was hacked obviously. If it was wordpress, then the databased was hacked too.

    You can always do wayback machine, and copy data and rebuild that way, sucks but better than scrapping it and starting over. If you had good content that was unique, then repost it again.

    You can check to see if your domain is flagged too.
  • Banned
    [DELETED]
  • I think deleting everything was a mistake, first of all. There are ways to deal with getting hacked without losing all your work.

    I may be wrong about this, but Google will unflag your website once it's safe again. You may have to tell them it's safe, but I don't see why it's would be a one-and-done deal. That would mean many of the big sites that have been hacked would also have been flagged and they would be done for good.

    Yes, guard yourself the best you can from hackers as it can literally happen to anybody.

    Benjamin Ehinger
    • [ 2 ] Thanks
  • Wordpress security is not something to skimp on! Locking down your wp-admin for your ip address only is one of the simplest way. Along with strong passwords on everything and brute force protection enabled. Also, keep everything updated! There are tons of bugs in themes and plugins.
  • Yes you can use the same domains. You could have cleaned the sites, or hired someone like me to clean it for you.

    Almost all internet marketers tell you to use WordPress, but in truth, because it powers 30% of the internet, it is a huge target. On average, over 17,000 WordPress sites are hacked every single day.

    WordPress is not a set it and forget it thing. There is a reason WP, plugins, and themes need updates. Many times there are security issues that go unmentioned in the WP community. It's unfortunate, but YOU have to stay on top of it.

    To reuse your domains, build a new site, check the domain against MX Tools black list report and then go to each place that it is black listed and ask them to recheck it. Long process, but if they rescan and you are clean, they will take you off the list.

    Also, look into using a web application firewall, Sucuri and CloudFlare both have great ones.

    Not to mention WordPress core.
  • There is a way to get back almost all You had on all sites, and rebuild it, but now in a new and secured systems with more control. And sure You can use all of Your domains again without any problem.
  • I feel sorry for you.
    Thats why i always go for a reputable hosting company and recommend same to my students and connections. What people normally do is to optin for ANY hosting just to save some bucks and ending up loosing alot .
  • Hello sir,
    It is so sad to hear about you.
    I do believe that hackers ruins our hardwork in a few minute. I know it is very hard to recover after this situation .
    But I can porvide you some helpful tricks so that you can be safe from hackers.

    1. Get a better and safer hosting service.

    2. Make you password strong with hash values.(use special character as many as you can )

    3. Hire someone (if you can) to look for security of your site.

    I believe this information will help you so much.

    Thank you.
  • I am safe on internet, If you use strong password you are never be hacked.
    • [2] replies

    • Absolutely ridiculous. There are many ways to be hacked no matter how strong your password is.

      Please don't post if you don't know what you are talking about. It only hurts others.

      Mark
      • [ 2 ] Thanks
      • [1] reply
    • This is a fallacy. Most of the hacks I have seen had nothing to do with passwords.
  • Offering a contrarian view here (when do I offer anything else?).

    Perhaps it's good to require people to sort through opinions/answers/garbage for themselves rather than do corrections for them.

    Perhaps if people reading threads like this can't tell who is giving information and who is spouting BS - those people reading are not equipped to succeed online (or offline either in my view).

    Bottom line - if you post bad info - repeat nonsense statements - give bad advice....you will not build a credible reputation here. You will leave a trail of inane posts and if you start running ads to sell here, results will be dismal.

    Every post you make on a forum creates an impression of YOU - of WHO you are - of WHAT your intelligence level and ethics might be. You write your own story here...if you write fiction or comic books...it will show before long.

    Wise decision. We may know an answer is niave or just plain wrong - but we aren't baby sitters. Someone in business online should be capable of sifting through the answers and the posturing. It's not good to TRUST a forum to always give you the right answer....and that's something we never have to worry about.
    • [ 2 ] Thanks
    • [1] reply
    • Yeah - really??? lol

      Sure - if you want a forum full of garbage that people need to sift through. If you were new to a forum and encountered a lot of that, would you return?

      A fate they deserve, but that still doesn't maintain a forum full of reliable, relevant information.

      None of the people in question are selling ads and probably never will. Most are hit and run - usually gone in a week or two, never to be seen, again, but they have left a reeking trail of detritus, behind, which never gets cleaned up. It's here forever. Petrified turds.

      I'm so happy to have taken the time to write my masterpiece. Who, knew???

      It's not like we're mining ore. Oh, wait - that's exactly what it's like. It shouldn't be that hard to eliminate the slag, aiding in the process of elimination.

      How's that for contrarian? Sorry if I muscled in on your turf. :-)

      Good night.
  • You may be right. I wrote that comment quickly after about 7 hours outside in the 40 degree weather with misty rain all day. My brain may still have been shivering.


    The minority of those joining the WF now don't have English as first language. Sometmes those who want to 'participate' have a hard time doing so due to language barriers and I try to keep that in mind.


    But also - where does it stop? At what point does removing 'nonsense' posts (which are deleted quite often daily) become 'leaving only comments a mod agrees with'? Mods used to delete posts when they were all 'one liners' - but that rule isn't in place now. However, a LOT of posts are being deleted as 'nonsense' or 'no context to WF'.




    Depends on whether there were enough quality posts to counter balance it. I've also left forums where some members were so in control no one could post without good chance of ridicule from 'premium' members. That also gets a bit out of hand here at times. Balancing act.



    Warrior Forum in the past was not a 'newbie' forum - now it is. We passed that tipping point a long time ago. You no longer see 20 'love potion' threads so that's a little bit of improvement. Not much, but a little.


    Someone else can decide the fate of the world - and the forum - it's back out in the cool weather for me today....leading trick or treat horseback rides.
    • [ 1 ] Thanks
    • [1] reply
    • Based upon your explanation, water on the brain may be a better fit. :-)

      It's not about who's joining. It's about who's actually posting. I'd dispute those numbers from what I see on a daily basis, but, I guess you folks have access to actual numbers.

      I do, also - but sometimes it appears that no effort is made, like when the post is three words and total gibberish. You've seen them. We all have.

      Well, I'll give you that we can't know what we never see. I'm glad to hear that there is a concerted, invisible effort taking place. That's reassuring.

      Seems like a step backwards to me, but what do I know.

      Kewl.

      Yes - a happy medium should be the goal. That said, I still think there's room for improvement and I do so love beating a dead horse. lol

      And how we long for the good old days. :-(

      I'd call that "much" improvement. Very, much!

      Wear a hat, this time. A waterproof one. :-)

      Cheers - and thank you for your well-reasoned input. You can always be counted on for that.
      • [ 1 ] Thanks
  • HTTPS has absolutely nothing to do with keeping your website from getting hacked. Nothing at all.
    • [ 4 ] Thanks
  • Yes, there is more scrutiny over silly and simple threads now than in the past, which is a good thing.

    The lack of traffic...? I have seen other forums with sky high rankings in Alexa that are dead, so a lot of variables come into play to figure that one out, although Google updating their algorithms, and people giving their stock portfolios more attention probably plays a part.

    But back to the subject, l have several sites, and get constant third party, Hostgator warnings about my site/s being hacked, but find nothing.

    Well l do find broken graphic Dropbox links, that l am too lazy to fix, and nothing else.

    But l still keep getting their "Your site is hacked, this will happen, and that" pay us ???? to fix your site before it is too late, blah, blah.

    Which l ignore now, although l took it seriously initially til l found nothing, except a company crying wolf, and hoping for a bite.

    Anyway just thought that l should share my experiences so others don't assume the worst, and do something they may regret later on.

    • [ 1 ] Thanks
  • I would also say, don't be careless. We got hacked 3 days ago, into a server, who has been handed down to so many different collaborators and no one ever changed the original, super easy password, and now 3 years later setting up that server we got hacked.

    Never be careless and if you have collaborators, make sure you can trust them with security issues.
  • [DELETED]
  • [DELETED]
  • I am looking into safeguarding my accounts now.
    Damn Hackers!!
  • Sorry to hear about that. I'm new user. I don't have better idea about that. Can you please share some guidelines to protect the account?
  • Banned
    [DELETED]
  • Banned
    [DELETED]
  • Sad to hear that. Try to use ssl and cloudflare to protect your website
  • Man that sucks. I had a WP site hacked a few years back and it sucked. I lost a very established site with hundreds of articles. Plus I was a beginner at that point so I probably didn't make the best choices when it came to backing up and taking all the necessary precautions. Scared me off of Wordpress for a couple of years. Hopefully you can salvage your site and get back most of your work.
    • [ 1 ] Thanks
  • It really sucks having your website hacked, so many sites get attacked and it's really dishearting when it happens.


    To avoid any issues in the future I decided to moved to a new host with a backend malware scanner, regular duel backups, Two Factor Authentication (for wordpress login & hosting), added reCAPTCHA on wp login, SSL and Wordfence plugin. I also installed Sophos for windows, ublock for firefox, use a wired connection and a VPN.
    • [ 1 ] Thanks
  • it's true it's easy to get hacked that's why you have to protect yourself by following a set of rules, sorry for what happened to you.


    __________________________________________________ __
    https://downloader.vip/the-pirate-bay/
    https://downloader.vip/yify-yts/
    https://www.oovoo.com/rargb/
  • Need better website security, try to use protected access
  • I use cloudflare for protect site from ddos attacks, but what about security, can't say anything.
  • There are a lot of viruses now
  • [DELETED]
  • [DELETED]
  • That's a tragedy. Wordpress sites are often hacked. I can recommend Wordfence to identify and remove most bad code.
    • [ 1 ] Thanks
  • [DELETED]
  • [DELETED]
  • First of all I recommend not to store any passwords online or on your devices. Use paper notes.
    Secondly start to use encrypted messengers and mails.
  • Banned
    [DELETED]
  • Yes, i am protected with VPN
  • [DELETED]
  • security discipline is key
  • [DELETED]

Next Topics on Trending Feed

  • 66

    Last week I received an email from Google saying one of my sites had been hacked. Sure enough when I checked there had been around 50 posts added to my website. When I checked my other sites on the shared web hosting plan I found that they had also been hacked. Out of fear of someone visiting one of my sites and being affected by this mess I just deleted everything.