Signs of a hacked website include pages redirecting to strange sites, unknown files or admin users, spam being sent from your account, or a browser warning. Act quickly and follow these steps.
- Change all passwords. This includes cPanel, FTP accounts, email accounts, database users and your website's admin logins.
- Scan your files. Use the malware scanner in cPanel to find infected files.
- Restore from a clean backup. If you know when the problem started, restore a backup from before that date. See How do I back up and restore my website?
- Update everything. Update your CMS (such as WordPress), all plugins and themes. Delete any you do not use.
- Check for unknown admin users in your website and remove them.
- Ask Google to recheck your site in Google Search Console if a browser warning was shown.
We may suspend an account that is actively sending spam or attacking other sites, to protect the server. If this happens we will open a ticket with the details. Please contact us if you need help. A professional clean-up can be arranged for £10.00.
