Knowledgebase

f your account or website has been compromised, you should follow these steps carefully to secure and restore it:

1. Scan and Identify Infected Files

• Run a Malware Scan via your hosting control panel to identify malicious or infected files within your site.
  

2. Clean or Remove Infected Files

• Delete infected files entirely if they're not required.
• If a file has had malicious code injected (usually at the beginning or end of the code), manually remove this injected code and restore the file to a safe and known version. Ideally, replace infected files with a clean backup or fresh download from the original software source
  
  

3. Update Website Software and Plugins

• Update your content management system (CMS) such as WordPress, Joomla, or Drupal, along with themes and plugins/modules. Outdated software often contains vulnerabilities exploited by attackers
  .

4. Delete Unused or Outdated Plugins and Applications

• Review and delete unnecessary or outdated plugins, themes, or applications from your hosting account. Reducing your website's "attack surface" helps prevent further breaches
  .

5. Change all passwords

• Immediately change your FTP, database, mail accounts, control panel, and CMS admin passwords. Use secure passwords that are unique, complex, and not reused anywhere else
  .

6. Implement Security Best Practices

• Enable Two-Factor Authentication (2FA) on your accounts.
• Access your account only through secure networks.
• Ensure SSL is enabled on your website and configured correctly for secure data transfer
  .

7. Restore from Backup (if available)

• If you have a known clean backup, you might choose to fully restore your site from this backup after ensuring all vulnerabilities are fixed.

8. Contact Hosting Support (if needed)

• If you're unable to completely mitigate the issue or need further assistance, please escalate through support channels for deeper analysis and assistance.

Following these steps carefully should help you quickly and effectively resolve and prevent future security compromises.