Same hack

supporthost · Jan 21, 2021

2 Sites affected by the same hack (post_content injected with malicious Javascript )
Seems hosted by tsoHost.

Some advice?

Kaz Wolfe · Jan 21, 2021

supporthost said:
2 Sites affected by the same hack (post_content injected with malicious Javascript )

Which platform are you using?

Efe Agbontaen · Jan 21, 2021

And are the websites hosted on the same server?

WerdPressEh · Jan 21, 2021

Find the logs and see just what they did, and WAF active and if so which one?

WerdPressEh · Jan 22, 2021

Most hackers that manage to inject or modify files on wordpress sites do not have access to root and so cannot modify server logs, also on a good setup logs will be monitored for changes which will be instantly logged offsite and the hacker would not have access to these even if he had root.

cspacews · Jan 22, 2021

I agree logs are always a good place to start with. Most of those Javascript infections are due to vulnerability in some plugin where they can writeback/run the encoded javascript to post their content onto the website.

Same hack

supporthost

Member

Kaz Wolfe

Well-known member

supporthost

Member

Efe Agbontaen

Member

supporthost

Member

Efe Agbontaen

Member

WerdPressEh

New member

Efe Agbontaen

Member

WerdPressEh

New member

cspacews

Member

Latest posts New threads

Latest posts

New threads

Latest Hosting Offers New Reviews

Latest hosting offers

Popular Contributors - Past 30 Days

Sponsors

Tag Cloud