Feb 2013
28^th

How did your site get hacked?

3 Comments

Everyone who has had their site hacked wants to know how it happened. Unfortunately there are a lot of way to get hacked and no single method for stopping it. I created this plugin because of a vulnerability in timthumb.php that got widely exploited about a year ago. This very useful timthumb script had a weakness in the way it was written that allowed hackers to place any script on your site thereby enabling them to gain access to your files and spread their infection. A newer and stronger timthumb.php was release to stop this abuse and it is fairly simple to update this file to keep your site from being exploited in this way. One of the things my plugin will do is to find old timthumbs and update them.

But, of course, there are other ways for your server to get infected. Many people don't realise that having their site on a hosting account with other site means sharing the vulnerabilities of all the other sites. Having your site on an isolated account, all by itself, can be a great improvement to your security. You will also need to make sure that your site up-to-date and has no vulnerabilities of it's own. Make sure the plugins and themes you have installed are secure and well trusted.

A lot of people think that they need to change there FTP passwords. This is not a bad idea but it's extremely unlikely that the a hacker is using your FTP account. Once a hacker has exploited a security hole in you website, hosting account, or server they will plant a script on your site to gain full access to your files. Then they don't even need your FTP to inject more malicious code and spread their infection further.

Unfortunately it may be very time consuming and costly to figure out exactly how you got hacked, but stay vigilant and take any security measures you can to avoid being an easy target. With every step you take to secure your site you become harder to hack and less of a target.

Aloha,

Tags: hacked, TimThumb

This entry was posted on February 28, 2013 at 9:16 am. You can follow any responses to this entry through the RSS 2.0 feed. You can skip to the end and leave a response. Pinging is currently not allowed.

Posted in How To by Anti-Malware Admin 3 Comments

3 Comments on "How did your site get hacked?"

• 
  On June 6, 2019 at 7:10 am, Brian said:

  How do you start a scan after upload of the plugin?

  Reply
  • 
    On June 6, 2019 at 10:14 am, Anti-Malware Admin said:

    After you activate the plugin from your wp-admin you can download the latest definition update on the Anti-Malware Setting page and then run the Complete Scan from there.

    Reply
• 
  On October 28, 2013 at 9:54 pm, Arturo said:

  There’s definately a great deal to know about this topic.

  I love all the points you made.

  Reply

• 

• Related Posts

  • hacked
    • We found hacked .htacces files in the root of every site on our shared host!
    • .htaccess hacked again! It’s time for a counter attack.
    • Found infected index.html files all over the place
    • Discovered PHP files with some nasty “eval” code in them
  • TimThumb
    • Zero Day Vulnerability in timthumb.php is the main problem

• Testimonials

  • I just want to say thank you
    your plugin works so well
    It has saved my butt again and again
    I have just donated a second time because your work is so much appreciated
    I was about to give up and delete all my sites when i found your plugin
    My hosting provider wanted to charge some outrageous amount that I simply could not afford
    I will keep donating whenever I can afford to
    thanks again
    -- Dan Howard
    
    
  • This plugin is really THE BEST!!!
    Proudly donated twice and will proudly donate more. keep up the great work!
    -- Eyal Beinhacker
    
    
  • Just donated to thank you for this brilliant plugin!!!
    
    Recently, my website was hit with some terrible malware after I installed a plugin.
    
    I can't bloody solve it.. it redirects all my traffic to some survey site. I contacted my webmaster to fix it asap but he has no idea. We even contacted external 'website rescue' services but they charge us a ridiculous amount of money and told us it 'could take up to 4 weeks'. Ridiculous, right?
    
    I was told to try this anti-malware plugin and found the root cause of it. Removed the malware-plugin that was responsible and our site is all back to normal.
    
    Thank you so much for this free plugin! My donation is a small token of appreciation. You guys rocks!!! Wordpress should publicly thank you for your hardwork and contribution to the community!
    
    Many thanks! God bless and have a great day!
    -- Health Internetwork