{"id":2751,"date":"2018-08-07T12:28:47","date_gmt":"2018-08-07T10:28:47","guid":{"rendered":"http:\/\/localhost\/helpcentre\/?p=2751"},"modified":"2025-03-25T09:25:13","modified_gmt":"2025-03-25T07:25:13","slug":"repair-hacked-website","status":"publish","type":"post","link":"https:\/\/xneelo.co.za\/help-centre\/website\/repair-hacked-website\/","title":{"rendered":"How to repair a hacked website"},"content":{"rendered":"<p>Sites are most often <b>hacked<\/b> through vulnerabilities in the website code, compromised Content Management Systems or by accessing the site via FTP, which is often linked to spyware or <a href=\"https:\/\/xneelo.co.za\/help-centre\/website\/brute-force-attacks\/\" target=\"_blank\" rel=\"noopener noreferrer\">brute force attacks<\/a>.<\/p>\n<p>It is imperative that you repair and secure the website as a matter of urgency, as there can be serious consequences.<\/p>\n<h2>What should I do if my site is hacked?<\/h2>\n<div id=\"action_points\">\n<ol>\n<li><strong>Remove the content<\/strong> the hacker uploaded to your website. This may be a complex process as it may not be obvious where or what the hacked content is. You may need the help of a web specialist or website cleaning services \u2013 <a href=\"https:\/\/xneelo.co.za\/help-centre\/website\/website-cleaning-services\/\" target=\"_blank\" rel=\"noopener noreferrer\">find help here<\/a>.<\/li>\n<li><strong>Replace the hacked content<\/strong> with your local website copy. If you don\u2019t have a copy of your website, your content and databases can be restored via the <a title=\"konsoleH's Restore Backup Tool\" href=\"https:\/\/xneelo.co.za\/help-centre\/control-panel\/how-to-restore-a-backup-of-your-site\/\" target=\"_blank\" rel=\"noopener\">Restore Backup tool<\/a>. (Ensure that you are updating a backup version from <em>before<\/em> the hack\u00a0\u2013 this is not always possible.)<\/li>\n<li><strong>Update your CMS and review your site\u2019s security.<\/strong> Please refer to the CMS provider\u2019s website and forums for information on security patches and version upgrades. If you need any assistance in managing your website content and security, we can refer you to specialists in this field.<\/li>\n<li><strong>Ensure that your website is <a title=\"protected\" href=\"https:\/\/xneelo.co.za\/help-centre\/website\/how-to-secure-your-website-against-hackers\/\" target=\"_blank\" rel=\"noopener\">protected<\/a><\/strong> against future attacks i.e. for a start, update the anti-virus software on your computer and change your <a title=\"FTP password\" href=\"https:\/\/xneelo.co.za\/help-centre\/website\/how-to-change-your-ftp-password\/\" target=\"_blank\" rel=\"noopener\">FTP password<\/a>. Use a security application such as <a href=\"https:\/\/xneelo.co.za\/cloudbric\/\" target=\"_blank\" rel=\"noopener noreferrer\">Cloudbric WAF<\/a>.<\/li>\n<\/ol>\n<\/div>\n<p>The motivation behind the site being hacked may be to engage in phishing or to send out spam. This kind of abuse associated with hacked websites is damaging to the reputations of your company and the hosting provider alike.<\/p>\n","protected":false,"plain":"Sites are most often <b>hacked<\/b> through vulnerabilities in the website code, compromised Content Management Systems or by accessing the site via FTP, which is often linked to spyware or <a href=\"https:\/\/xneelo.co.za\/help-centre\/website\/brute-force-attacks\/\" target=\"_blank\" rel=\"noopener noreferrer\">brute force attacks<\/a>.\r\n\r\nIt is imperative that you repair and secure the website as a matter of urgency, as there can be serious consequences.\r\n<h2>What should I do if my site is hacked?<\/h2>\r\n<div id=\"action_points\">\r\n<ol>\r\n \t<li><strong>Remove the content<\/strong> the hacker uploaded to your website. This may be a complex process as it may not be obvious where or what the hacked content is. You may need the help of a web specialist or website cleaning services \u2013 <a href=\"https:\/\/xneelo.co.za\/help-centre\/website\/website-cleaning-services\/\" target=\"_blank\" rel=\"noopener noreferrer\">find help here<\/a>.<\/li>\r\n \t<li><strong>Replace the hacked content<\/strong> with your local website copy. If you don\u2019t have a copy of your website, your content and databases can be restored via the <a title=\"konsoleH's Restore Backup Tool\" href=\"https:\/\/xneelo.co.za\/help-centre\/control-panel\/how-to-restore-a-backup-of-your-site\/\" target=\"_blank\" rel=\"noopener\">Restore Backup tool<\/a>. (Ensure that you are updating a backup version from <em>before<\/em> the hack\u00a0\u2013 this is not always possible.)<\/li>\r\n \t<li><strong>Update your CMS and review your site\u2019s security.<\/strong> Please refer to the CMS provider\u2019s website and forums for information on security patches and version upgrades. If you need any assistance in managing your website content and security, we can refer you to specialists in this field.<\/li>\r\n \t<li><strong>Ensure that your website is <a title=\"protected\" href=\"https:\/\/xneelo.co.za\/help-centre\/website\/how-to-secure-your-website-against-hackers\/\" target=\"_blank\" rel=\"noopener\">protected<\/a><\/strong> against future attacks i.e. for a start, update the anti-virus software on your computer and change your <a title=\"FTP password\" href=\"https:\/\/xneelo.co.za\/help-centre\/website\/how-to-change-your-ftp-password\/\" target=\"_blank\" rel=\"noopener\">FTP password<\/a>. Use a security application such as <a href=\"https:\/\/xneelo.co.za\/cloudbric\/\" target=\"_blank\" rel=\"noopener noreferrer\">Cloudbric WAF<\/a>.<\/li>\r\n<\/ol>\r\n<\/div>\r\nThe motivation behind the site being hacked may be to engage in phishing or to send out spam. This kind of abuse associated with hacked websites is damaging to the reputations of your company and the hosting provider alike."},"excerpt":{"rendered":"<p>Sites are most often hacked through vulnerabilities in the website code, compromised Content Management Systems or by accessing the site via FTP.<\/p>\n","protected":false},"author":7,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"lsx_disable_title":"0","_relevanssi_hide_post":"","_relevanssi_hide_content":"","_relevanssi_pin_for_all":"","_relevanssi_pin_keywords":"","_relevanssi_unpin_keywords":"","_relevanssi_related_keywords":"","_relevanssi_related_include_ids":"","_relevanssi_related_exclude_ids":"","_relevanssi_related_no_append":"","_relevanssi_related_not_related":"","_relevanssi_related_posts":"","_relevanssi_noindex_reason":"","footnotes":""},"categories":[166],"tags":[22461,22464,22467,22458,19134,4383],"topics":[10377],"class_list":["post-2751","post","type-post","status-publish","format-standard","hentry","category-website","tag-site-is-hacked","tag-spyware","tag-vulnerabilities","tag-repair-hacked-website","tag-hacked-website","tag-brute-force","topics-website-security"],"acf":[],"additional_meta":{"category_title":[{"term_id":166,"name":"Website","slug":"website","term_group":0,"term_taxonomy_id":166,"taxonomy":"category","description":"About your Website(s)","parent":0,"count":169,"filter":"raw","term_order":"120","cat_ID":166,"category_count":169,"category_description":"About your Website(s)","cat_name":"Website","category_nicename":"website","category_parent":0}],"tag_title":[{"term_id":22461,"name":"site is hacked","slug":"site-is-hacked","term_group":0,"term_taxonomy_id":22461,"taxonomy":"post_tag","description":"","parent":0,"count":1,"filter":"raw","term_order":"668"},{"term_id":22464,"name":"spyware","slug":"spyware","term_group":0,"term_taxonomy_id":22464,"taxonomy":"post_tag","description":"","parent":0,"count":1,"filter":"raw","term_order":"669"},{"term_id":22467,"name":"vulnerabilities","slug":"vulnerabilities","term_group":0,"term_taxonomy_id":22467,"taxonomy":"post_tag","description":"","parent":0,"count":1,"filter":"raw","term_order":"670"},{"term_id":22458,"name":"repair hacked website","slug":"repair-hacked-website","term_group":0,"term_taxonomy_id":22458,"taxonomy":"post_tag","description":"","parent":0,"count":1,"filter":"raw","term_order":"671"},{"term_id":19134,"name":"hacked website","slug":"hacked-website","term_group":0,"term_taxonomy_id":19134,"taxonomy":"post_tag","description":"","parent":0,"count":2,"filter":"raw","term_order":"1760"},{"term_id":4383,"name":"brute force","slug":"brute-force","term_group":0,"term_taxonomy_id":4383,"taxonomy":"post_tag","description":"","parent":0,"count":2,"filter":"raw","term_order":"2843"}]},"featured_image_src":null,"author_info":{"display_name":"marketing","author_link":"https:\/\/xneelo.co.za\/help-centre\/author\/marketing\/","author_avatar":"https:\/\/secure.gravatar.com\/avatar\/a6ea315e112423b2b955cb020fbce2b0835956c6ad85ff0f13f1db298977eaaa?s=96&d=mm&r=g"},"_links":{"self":[{"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/posts\/2751","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/comments?post=2751"}],"version-history":[{"count":0,"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/posts\/2751\/revisions"}],"wp:attachment":[{"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/media?parent=2751"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/categories?post=2751"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/tags?post=2751"},{"taxonomy":"topics","embeddable":true,"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/topics?post=2751"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}