How to recover from a hacked website - Revision history

Docs admin: Docs admin moved page My Site was Hacked, What Do I Do to How to recover from a hacked website: Remove comma in page title/link

2014-12-13T16:38:23Z

Docs admin moved page My Site was Hacked, What Do I Do to How to recover from a hacked website: Remove comma in page title/link

← Older revision	Revision as of 12:38, 13 December 2014
(No difference)

Docs admin: /* How was my website hacked? */

2013-10-11T19:17:59Z

How was my website hacked?

← Older revision		Revision as of 15:17, 11 October 2013
Line 13:		Line 13:
	'''1 )''' A script vulnerability was exploited. ('''most common''')		'''1 )''' A script vulnerability was exploited. ('''most common''')

	If you installed a script and failed to keep it updated, you can ~~almost~~ be certain that is why you were hacked. It is imperative that you regularly update all the scripts you use. Script developers endlessly release new versions that patch discovered vulnerabilities. New vulnerabilities are introduced into the code as script developers code new features. Discovered vulnerabilities are patched; new features are coded, which introduce new vulnerabilities. It is a never ending cycle.		If you installed a script and failed to keep it updated, you can be all but certain that is why you were hacked. It is imperative that you regularly update all the scripts you use. Script developers endlessly release new versions that patch discovered vulnerabilities. New vulnerabilities are introduced into the code as script developers code new features. Discovered vulnerabilities are patched; new features are coded, which introduce new vulnerabilities. It is a never ending cycle.

	'''2 )''' A password was compromised.		'''2 )''' A password was compromised.

Docs admin: /* How was I hacked? */

2013-10-11T19:17:24Z

How was I hacked?

← Older revision		Revision as of 15:17, 11 October 2013
Line 5:		Line 5:
	Our Technical support staff regularly watches for security bulletins regarding your shared/managed server's software. Our kernels are kept up to date, non-standard ports are closed off in our aggressive firewall, and server software is kept at the latest stable, secure version.		Our Technical support staff regularly watches for security bulletins regarding your shared/managed server's software. Our kernels are kept up to date, non-standard ports are closed off in our aggressive firewall, and server software is kept at the latest stable, secure version.

	==How was I hacked?==		==How was my website hacked?==

	You may be wondering "How was I hacked?"		You may be wondering "How was my website hacked?"

	Here are the two main reasons why websites get hacked:		Here are the two main reasons why websites get hacked:

Docs admin: /* Now that I've been hacked, what should I do? */

2013-10-11T19:15:07Z

Now that I've been hacked, what should I do?

← Older revision		Revision as of 15:15, 11 October 2013
Line 41:		Line 41:
	The next obvious question is "Now that I've been hacked, what should I do?"		The next obvious question is "Now that I've been hacked, what should I do?"

	Acenet strongly encourages you to hire a qualified professional to repair your hacked website for you. The cost will be minimal compared to the amount of stress your are spared. Plus, if you do not do it right, you will just get hacked again. A qualified professional will provide the emotional relief you desire. You won't have to exert ~~any~~ energy recovering from this nightmare. And you will ~~know~~ your website is properly secured ~~against getting~~ hacked again ~~tomorrow~~.		Acenet strongly encourages you to hire a qualified professional to repair your hacked website for you. The cost will be minimal compared to the amount of stress your are spared. Plus, if you do not do it right, you will just get hacked again. A qualified professional will provide the emotional relief you desire. You won't have to exert an ounce of energy recovering from this nightmare. And you will enjoy peace of mind knowing your website is properly secured -- it won't be hacked again when you wake up.

	Best of all, Acenet found a qualified professional for you -- a guy who genuinely cares about you and your website. Helping you recover from a hacked website is his life passion. His name is Jim Walker, he has 15 years experience, and you can call him on is cell phone any time of day. His number is (619) 479-6637. Once you call Jim, you will know you are in good hands. You can learn more about Jim and what he does by visiting his website http://hackrepair.com/. You can also email Jim; his email address is jim [at] hackrepair.com. (Neither Jim Walker nor hackrepair.com have any affiliation with Acenet, Inc.)		Best of all, Acenet found a qualified professional for you -- a guy who genuinely cares about you and your website. Helping you recover from a hacked website is his life passion. His name is Jim Walker, he has 15 years experience, and you can call him on is cell phone any time of day. His number is (619) 479-6637. Once you call Jim, you will know you are in good hands. You can learn more about Jim and what he does by visiting his website http://hackrepair.com/. You can also email Jim; his email address is jim [at] hackrepair.com. (Neither Jim Walker nor hackrepair.com have any affiliation with Acenet, Inc.)

Docs admin: /* How was I hacked? */

2013-10-11T19:12:50Z

How was I hacked?

← Older revision		Revision as of 15:12, 11 October 2013
Line 9:		Line 9:
	You may be wondering "How was I hacked?"		You may be wondering "How was I hacked?"

	Here are the two main reasons why ~~80% of~~ websites get hacked:		Here are the two main reasons why websites get hacked:

	'''1 )''' A script vulnerability was exploited. ('''~~This is how 64% of websites are hacked~~''')		'''1 )''' A script vulnerability was exploited. ('''most common''')

	If you installed a script and failed to keep it updated, you can almost be certain that is why you were hacked. It is imperative that you regularly update all the scripts you use. Script developers endlessly release new versions that patch discovered vulnerabilities. New vulnerabilities are introduced into the code as script developers code new features. Discovered vulnerabilities are patched; new features are coded, which introduce new vulnerabilities. It is a never ending cycle.		If you installed a script and failed to keep it updated, you can almost be certain that is why you were hacked. It is imperative that you regularly update all the scripts you use. Script developers endlessly release new versions that patch discovered vulnerabilities. New vulnerabilities are introduced into the code as script developers code new features. Discovered vulnerabilities are patched; new features are coded, which introduce new vulnerabilities. It is a never ending cycle.

	'''2 )''' A password was compromised. ~~('''This is how 16% of websites are hacked''')~~		'''2 )''' A password was compromised.

	Hosting servers managed by Acenet feature Brute Force Protection. Brute force is a technique used by evildoers to defeat password protection mechanisms; this technique involves trying a large combination of passwords until the correct password is guessed. After a few unsuccessful login attempts, the person attempting to login is locked out from any further login attempts on hosting servers managed by Acenet. If you are an Acenet shared hosting subscriber, your password cannot be defeated by brute force.		Hosting servers managed by Acenet feature Brute Force Protection. Brute force is a technique used by evildoers to defeat password protection mechanisms; this technique involves trying a large combination of passwords until the correct password is guessed. After a few unsuccessful login attempts, the person attempting to login is locked out from any further login attempts on hosting servers managed by Acenet. If you are an Acenet shared hosting subscriber, your password cannot be defeated by brute force.

Docs admin: /* Now that I've been hacked, what should I do? */

2013-10-11T19:00:44Z

Now that I've been hacked, what should I do?

← Older revision		Revision as of 15:00, 11 October 2013
Line 43:		Line 43:
	Acenet strongly encourages you to hire a qualified professional to repair your hacked website for you. The cost will be minimal compared to the amount of stress your are spared. Plus, if you do not do it right, you will just get hacked again. A qualified professional will provide the emotional relief you desire. You won't have to exert any energy recovering from this nightmare. And you will know your website is properly secured against getting hacked again tomorrow.		Acenet strongly encourages you to hire a qualified professional to repair your hacked website for you. The cost will be minimal compared to the amount of stress your are spared. Plus, if you do not do it right, you will just get hacked again. A qualified professional will provide the emotional relief you desire. You won't have to exert any energy recovering from this nightmare. And you will know your website is properly secured against getting hacked again tomorrow.

	Best of all, Acenet found a qualified professional for you -- a guy who genuinely cares about you and your website. Helping you recover from a hacked website is his life passion. His name is Jim Walker, he has 15 years experience, and you can call him on is cell phone any time of day. His number is (619) 479-6637. Once you call Jim, you will know you are in good hands. You can learn more about Jim and what he does by visiting his website http://hackrepair.com/. You can also email Jim; his email address is jim [at] hackrepair.com.		Best of all, Acenet found a qualified professional for you -- a guy who genuinely cares about you and your website. Helping you recover from a hacked website is his life passion. His name is Jim Walker, he has 15 years experience, and you can call him on is cell phone any time of day. His number is (619) 479-6637. Once you call Jim, you will know you are in good hands. You can learn more about Jim and what he does by visiting his website http://hackrepair.com/. You can also email Jim; his email address is jim [at] hackrepair.com. (Neither Jim Walker nor hackrepair.com have any affiliation with Acenet, Inc.)

	Acenet has written the following general guide for those who insist on handling the recovery on their own.		Acenet has written the following general guide for those who insist on handling the recovery on their own.

Docs admin: /* Now that I've been hacked, what should I do? */

2013-10-11T18:58:34Z

Now that I've been hacked, what should I do?

← Older revision		Revision as of 14:58, 11 October 2013
Line 39:		Line 39:
	==Now that I've been hacked, what should I do?==		==Now that I've been hacked, what should I do?==

	The next question ~~you should ask yourself~~ is "Now that I've been hacked, what should I do?"		The next obvious question is "Now that I've been hacked, what should I do?"

	Acenet ~~has written this guide~~ to ~~assist~~ you ~~but this is a question best answered by~~ your ~~webmaster~~. You ~~can either follow this guide or hire a webmaster. Acenet~~'~~s experts are occasionally available~~ to ~~take on paid webmaster work~~. ~~The billable rate for webmaster labor~~ is ~~$79.95/hour~~.		Acenet strongly encourages you to hire a qualified professional to repair your hacked website for you. The cost will be minimal compared to the amount of stress your are spared. Plus, if you do not do it right, you will just get hacked again. A qualified professional will provide the emotional relief you desire. You won't have to exert any energy recovering from this nightmare. And you will know your website is properly secured against getting hacked again tomorrow.

	~~Alternatively~~, you can ~~find available professionals that~~ can ~~assist you~~ at ~~the links posted below~~.		Best of all, Acenet found a qualified professional for you -- a guy who genuinely cares about you and your website. Helping you recover from a hacked website is his life passion. His name is Jim Walker, he has 15 years experience, and you can call him on is cell phone any time of day. His number is (619) 479-6637. Once you call Jim, you will know you are in good hands. You can learn more about Jim and what he does by visiting his website http://hackrepair.com/. You can also email Jim; his email address is jim [at] hackrepair.com.

	~~http://elance~~.~~com~~		Acenet has written the following general guide for those who insist on handling the recovery on their own.

	~~http://guru~~.~~com~~		This guide was written with a novice in mind, but covering all necessary vocabulary, industry knowledge, and script-specific information is impractical. Novices should expect to do additional research (Googling) to fill in their knowledge gaps. Hiring a qualified professional is highly recommended. (Call Jim Walker at (619) 479-6637.)

	This guide was written with a novice in mind, but covering all necessary vocabulary and industry knowledge is impractical. Novices should expect to do additional research (Googling) to fill in their knowledge gaps. Hiring a qualified professional is highly recommended.		Here is what Acenet suggests webmasters do:

	Here is what Acenet suggests ~~for your webmaster to~~ do:

	===Backup your account===		===Backup your account===

Docs admin: /* How was I hacked? */

2013-10-11T17:59:46Z

How was I hacked?

← Older revision		Revision as of 13:59, 11 October 2013
Line 27:		Line 27:
	2) Your workstation is compromised.		2) Your workstation is compromised.

	If you do not keep your workstation clean and secure, an evildoer could have access to all the passwords you ~~type~~ on your workstation.		If you do not keep your workstation clean and secure, an evildoer could have access to all the passwords you use on your workstation.

	Install these free Windows security software packages:		Install these free Windows security software packages:

Docs admin: /* How was I hacked? */

2013-10-11T17:59:20Z

How was I hacked?

← Older revision		Revision as of 13:59, 11 October 2013
Line 25:		Line 25:
	Use a secure password. A secure password is a random combination of lowercase letters, uppercase letters, numbers and special character symbols. A ridiculously weak password, for example, would be your username. Another example of a ridiculously weak password would be "admin". Ridiculously weak passwords can easily be guessed in a single login attempt. If you were using a ridiculously weak password, that is probably how the evildoer hacked your website. You can generate strong, secure passwords inside cPanel using the random password generator.		Use a secure password. A secure password is a random combination of lowercase letters, uppercase letters, numbers and special character symbols. A ridiculously weak password, for example, would be your username. Another example of a ridiculously weak password would be "admin". Ridiculously weak passwords can easily be guessed in a single login attempt. If you were using a ridiculously weak password, that is probably how the evildoer hacked your website. You can generate strong, secure passwords inside cPanel using the random password generator.

	2) Your workstation is compromised.		2) Your workstation is compromised.

	If you ~~are using Microsoft Windows~~ on your workstation~~, install~~ these free security software packages:		If you do not keep your workstation clean and secure, an evildoer could have access to all the passwords you type on your workstation.

			Install these free Windows security software packages:

	A) MalwareBytes		A) MalwareBytes

Docs admin: /* How was I hacked? */

2013-10-11T17:55:52Z

How was I hacked?

← Older revision		Revision as of 13:55, 11 October 2013
Line 23:		Line 23:
	1) You are using a ridiculously weak password.		1) You are using a ridiculously weak password.

	Use a secure password. A secure password is a random combination of lowercase letters, uppercase letters, numbers and special character symbols. A ridiculously weak password, for example, would be your username. Another example of a ridiculously weak password would be "admin". Ridiculously weak passwords can be ~~used~~ in a single login attempt. If you were using a ridiculously weak password, that is probably how the evildoer hacked your website. You can generate strong, secure passwords inside cPanel using the random password generator.		Use a secure password. A secure password is a random combination of lowercase letters, uppercase letters, numbers and special character symbols. A ridiculously weak password, for example, would be your username. Another example of a ridiculously weak password would be "admin". Ridiculously weak passwords can easily be guessed in a single login attempt. If you were using a ridiculously weak password, that is probably how the evildoer hacked your website. You can generate strong, secure passwords inside cPanel using the random password generator.

	2) Your workstation is compromised.		2) Your workstation is compromised.