Make WordPress Core

Opened 10 years ago

Closed 10 years ago

Last modified 10 years ago

#34270 closed defect (bug) (invalid)

HaCKed by Mr.Kro0oz.305

Reported by: mostafaznv's profile mostafaznv Owned by:
Milestone: Priority: normal
Severity: normal Version: 4.3.1
Component: Security Keywords:
Focuses: Cc:

Description

hi everyone!
my wp site hacked by a person with this id ... Mr.Kro0oz.305
i googled this man and i found a long list of sites that have been hacked by this person!
it seems he know to hack wp! becuase all of his sites are wp base!

see this link:
http://www.zone-h.org/archive/notifier=Mr.Kro0oz.305/page=1

Change History (5)

#1 @johnbillion
10 years ago

  • Milestone Awaiting Review deleted
  • Resolution set to invalid
  • Status changed from new to closed

Sorry to hear that, mostafaznv. Please see this Codex page on what to do if your site has been hacked: https://codex.wordpress.org/FAQ_My_site_was_hacked.

#2 @mostafaznv
10 years ago

  • Resolution invalid deleted
  • Status changed from closed to reopened

i saw that before!
but all of my wp folders have been deleted by hacker...
now i have only a cpanel host and a wordpress database

wp-content
wp-admin
and others hacked by hacker

Last edited 10 years ago by mostafaznv (previous) (diff)

#3 @johnbillion
10 years ago

  • Resolution set to invalid
  • Status changed from reopened to closed

Unfortunately this is not the place for support with regard to a hacked website. Please read through the Codex page, it explains all the steps you need to take to get your website back up and running, and where you can get further help if you need it.

#4 @mostafaznv
10 years ago

i dont want help!
i reported this security problem becuase i saw that long list of wp hacked sites!

#5 @johnbillion
10 years ago

Thanks, then when you opened this ticket you must have seen the large warning message stating that security reports are not to be reported here, and checked a checkbox to confirm that you weren't reporting a security issue.

https://i.imgur.com/YQxL6Kh.png

https://i.imgur.com/8gxQ7p2.png

Unfortunately without further information other than "my website was hacked", there's not a lot that the WordPress project can do. Large scale hacks such as this are often the result of a vulnerability that's been found in a popular plugin or theme, or as a result of poorly configured shared hosting.

If you have access to access logs on your server and they include the full request information (such as the contents of POST requests), or your host can provide extended access logs, then by all means please get in touch with security@wordpress.org.

Note: See TracTickets for help on using tickets.