WP Infected. Phising and Spam

by utomo
2 replies
Anybody here getting their WP infected ?

This is Mine
i50.tinypic.com/e7i107.jpg

which located
XXXXXXX.com/wp-content/plugins/wordfence/hmrc/allaccounts/halifax/personal/logon/login.jsp
XXXXXXX.com/wp-content/plugins/wordfence/hmrc/refundportal.htm
XXXXXXX.com/wp-content/plugins/wordfence/hmrc/allaccounts/lloydstsb/index.html

XXXXXXX.com/wp-content/plugins/wordfence/hmrc/allaccounts/northern/northernrock.co.uk.htm

Note: XXXXXXX is deleted domain name

wordfence can Not Stop it and it even putting the files inside wordfence folder.

Anybody know what is this ? and how to avoid this in future ?

Thankyou
#infected #phising #spam
  • Profile picture of the author jakebvs85
    I am not sure what happened. Did not happen to me though.
    {{ DiscussionBoard.errors[6702702].message }}
  • Profile picture of the author anconsoft
    Originally Posted by utomo View Post

    Anybody here getting their WP infected ?

    This is Mine
    i50.tinypic.com/e7i107.jpg

    which located
    XXXXXXX.com/wp-content/plugins/wordfence/hmrc/allaccounts/halifax/personal/logon/login.jsp
    XXXXXXX.com/wp-content/plugins/wordfence/hmrc/refundportal.htm
    XXXXXXX.com/wp-content/plugins/wordfence/hmrc/allaccounts/lloydstsb/index.html

    XXXXXXX.com/wp-content/plugins/wordfence/hmrc/allaccounts/northern/northernrock.co.uk.htm

    Note: XXXXXXX is deleted domain name

    wordfence can Not Stop it and it even putting the files inside wordfence folder.

    Anybody know what is this ? and how to avoid this in future ?

    Thankyou
    Your website could have been hacked through a theme or plugin that you installed and certain elements (e.g. files) that contain pishing stuff may have been uplodated by hackers. You should do some cleanup to your site, even install a new fresh Wordpress.
    {{ DiscussionBoard.errors[6703930].message }}

Trending Topics