please help

zakidouara · May 4, 2020

please help
I downloaded from here Template or WordPress plugin, but someone logged into my control panel and removed my site's content?
When I delete WordPress and recreate my site, does the hacker delete it directly?

The picture shows you the topic

ckeeper · May 4, 2020

Hi there,
First of all do not panic, make a backup of your existing website, I do not think your site is hacked because you have used a plugin or theme from Babiato. Can you login to the backend? We can not help you much without getting more detailed info from you. These indonesian hacker group are the ones that did it, https://www.facebook.com/sgbteam.hijr/ I think your site is still there, someone needs to clean out the hack.

mesum · May 4, 2020

what list ur plugin and ur theme?
Tips : try to scan all files your download from any website in Virustotal.com

Kanxa · May 4, 2020

zakidouara said:
please help
I downloaded from here Template or WordPress plugin, but someone logged into my control panel and removed my site's content?
When I delete WordPress and recreate my site, does the hacker delete it directly?

The picture shows you the topic

Hey, the Same Incident happened to me...My site also Removed From Control Panel. When I contact My Host they Said They do not Find any Error or Unusual activity...and I think that was due to my mistake or I didn't install any Files in a directory but I know that before the Site was removed I Sent an Email From My website to all Users...

Moh Farawati · May 4, 2020

tanierlyons · May 4, 2020

zakidouara said:
please help
I downloaded from here Template or WordPress plugin, but someone logged into my control panel and removed my site's content?
When I delete WordPress and recreate my site, does the hacker delete it directly?

The picture shows you the topic

which hosting you are using ? check other domain on your hosting

zakidouara · May 4, 2020

Tomz said:
which hosting you are using ? check other domain on your hosting

NAMECHEAP

tanierlyons · May 4, 2020

zakidouara said:
NAMECHEAP

WHICH Plugin and theme u download from here and install it on your wordpress ?
also did u download anything from other site?

cesar360 · May 4, 2020

Defacing is a prank attack probally is not plugin related, this atack can happen when admin default username is not changed or via database attack.

Acess cpanel and check index.php and .htaccess (hidden file) i got some customers who downloaded nulled plugin from ebay with a php snippet code to redirect to this page.

Also check all your domains and do a FULL Backup restore (if possible) and I recomend later downlad a Malware Scanner plugin to try identify and remove any malicious JS. Wordfence is the best to me.
Here you can find more tips

10 Steps to Remove Malware from Your WordPress Site

Removing malware from your WordPress site is no easy task. These 10 steps will walk you through a systematic WordPress hack repair process.

askwpgirl.com

Good Luck bro, defacing can be undone without data loss in most of cases

Prabowo · May 4, 2020

cesar360 said:
Defacing is a prank attack probally is not plugin related, this atack can happen when admin default username is not changed or via database attack.

Acess cpanel and check index.php and .htaccess (hidden file) i got some customers who downloaded nulled plugin from ebay with a php snippet code to redirect to this page.

Also check all your domains and do a FULL Backup restore (if possible) and I recomend later downlad a Malware Scanner plugin to try identify and remove any malicious JS. Wordfence is the best to me.
Here you can find more tips

10 Steps to Remove Malware from Your WordPress Site

Removing malware from your WordPress site is no easy task. These 10 steps will walk you through a systematic WordPress hack repair process.

askwpgirl.com

Good Luck bro, defacing can be undone without data loss in most of cases

This page? Did you mean Babiato, right?

MrSam_1 · May 4, 2020

zakidouara said:
please help
I downloaded from here Template or WordPress plugin, but someone logged into my control panel and removed my site's content?
When I delete WordPress and recreate my site, does the hacker delete it directly?

The picture shows you the topic

Kanxa said:
Hey, the Same Incident happened to me...My site also Removed From Control Panel. When I contact My Host they Said They do not Find any Error or Unusual activity...and I think that was due to my mistake or I didn't install any Files in a directory but I know that before the Site was removed I Sent an Email From My website to all Users...

Guys, "i downloaded from here template or wordpress plugin" is such a idiot thing to say. This board is full with templates and plugins. Be more specific:
I downloaded and used "this plugin" and "this theme" and ... whatever happened.

From what you said one can assume that you used hello theme and voicer plugin. Isn't that what you used?

You want help then ask for it in a proper way.

I've seen another member pretending that his site is virused because of a plugin he downloaded from babiato but in the end resulted that he used a version prior his joining to babiato.

cesar360 · May 4, 2020

ubaid said:
This page? Did you mean Babiato, right?

no, this black screen page signed by xbx39 the same OP has.
I dont think babiato uploads caused the issue, I have a lot of websites with wordpress plugins and themes since 2018 and never happened it.

afroking · May 4, 2020

f

zakidouara said:
please help
I downloaded from here Template or WordPress plugin, but someone logged into my control panel and removed my site's content?
When I delete WordPress and recreate my site, does the hacker delete it directly?

The picture shows you the topic

fu**

MrSam_1 · May 4, 2020

Your websites are permanently scanned for vulnerabilities. And I mean permanently. Most active scan for wordpress is using xmlrpc to get your admin name and then bruteforce starts. And not even bruteforce, there are attacks that exploits certain vulnerabilities in not enough secured or improper coded plugins and themes that will reveal the password or give attacker a door to your website.

This happens on one of my websites and daily I have hundreds of attacks on all websites

Edit: screenshots taken from wordfence (I also have a fail2ban installed on server for other applications)

please help

Welcome to Original Babiato! All Resource are Free and No downloading Limit.. Join Our Official Telegram Channel For updates Bypass All the resource restrictions/Password/Key? Read here! Read Before submitting Resource Read here!Support Our Work By Donating Click here!

Join Our Official Telegram Channel For updates Bypass All the resource restrictions/Password/Key? Read here! Read Before submitting Resource Read here!

Support Our Work By Donating Click here!

New member

Attachments

Well-known member

mesum

Guest

Active member

Active member

Well-known member

New member

Well-known member

New member

Well-known member

Well-known member

New member

Active member

Well-known member

Similar threads

Forum statistics

Share this page

Welcome to Original Babiato! All Resource are Free and No downloading Limit..
Join Our Official Telegram Channel For updates
Bypass All the resource restrictions/Password/Key? Read here!
Read Before submitting Resource Read here!
Support Our Work By Donating Click here!

Join Our Official Telegram Channel For updates
Bypass All the resource restrictions/Password/Key? Read here!
Read Before submitting Resource Read here!