Websites Hacked

[fadishaya]

Hello, 

since most of the website today getting hacked by Hacked by ./TuanDestroy, we are to access godaddy account but not able to access our webhosting, its keep loading tried with diffrent browsers and different Internet connections and laptops. 

attached image will show you what we are facing

[Zulfiqar · Accepted solution]

Hello fadishaya, I hope you are doing well. Thank you for posting in the GoDaddy community. This is a sad story that your website has been hacked. You should take some security measures. If you were using the WordPress platform for your website then there are lots of plugins and features to secure your website. 

Website owners must follow these steps:

• Protect against XSS attacks
  
• Keep software up to date
  
• Beware of error messages
  
• Avoid file uploads
  
• Check your passwords
  
• Use HTTPS
  
• Get website security tools such as Netsparker and OpenVAS etc.
  
• DDoS attack protection

[Zulfiqar · Accepted solution]

Hello fadishaya, I hope you are doing well. Thank you for posting in the GoDaddy community. This is a sad story that your website has been hacked. You should take some security measures. If you were using the WordPress platform for your website then there are lots of plugins and features to secure your website. 

Website owners must follow these steps:

• Protect against XSS attacks
  
• Keep software up to date
  
• Beware of error messages
  
• Avoid file uploads
  
• Check your passwords
  
• Use HTTPS
  
• Get website security tools such as Netsparker and OpenVAS etc.
  
• DDoS attack protection

[PL281 · Accepted solution]

@fadishaya 

1) There does seem to be an issue with the https://myh.godaddy.com page as it is just spinning for me as well - I would give this a little bit as I'm sure the GoDaddy admins are aware of this.

2) Once you can get to your server I recommend the following (I'm assuming this is a WordPress site)

A) download the latest version of WordPress (https://wordpress.org/download)

B) Delete the wp-admin, wp-include and the php files in the root of the website (I also assume you have not added any custom php files in the root of the site)

C) Upload the wordpress zip and then move the files back into the root of the site

D) This is going to be the biggest issue to resolve this and may involve some work.

I would recommend deleting all the themes and plugins & reinstalling them

Then I would also make sure to upgrade the plugins to the latest versions

I would also check the wp-content folder for any odd looking folders / php files

This should get you back up and running