End users are seeing malware infection warnings. No wait, now they can\u2019t get in – of course not, your host has just suspended your website. To cap it all you receive a blacklist warning from Google. Perfect!<\/p>\n
Having your Joomla website hacked is a nightmare. You will need to work out what happened, clean the site and request removal of the suspension\/blacklist warnings. Investigating and cleaning your site will take time, but with decent admin skills, you will recover it. Joomla security is an in-depth subject but we will touch on some of the key points here, including how not to be in this position again.<\/p>\n
Clearly, you\u2019re not the first victim; experts such as Sucuri [1] and Comodo [2] provide tools for scanning websites, and Joomla provides plans for managed websites.<\/p>\n
Hackers often modify files in the Joomla core. You may be able to spot this by checking for recently modified files, for example:<\/p>\n
find .\/ -type f \u2013mtime -10 — to list files modified in the last 10 days<\/p>\n
A more thorough check is to compare the current system with a reliable backup, or with a clean copy of Joomla from GitHub. Use the diff command with the \u2013r to compare all sub-folders<\/p>\n
Check for files that are not present in the clean copy, files in the wrong folder, and for encoded files.<\/p>\n
A hacker may have penetrated the website through a user account with a weak password and\/or admin rights. Check for possible compromised accounts in the Administrator area:<\/p>\n
After checking the file system and user accounts thoroughly, clean up the website.<\/p>\n
Now that your attention is firmly on the consequences of being hacked, it\u2019s a good time to implement Joomla security steps<\/p>\n
<\/p>\n
Keep safe – have a plan for if the worst happens!<\/p>\n
<\/p>\n
[1] https:\/\/sucuri.net\/<\/a><\/p>\n [2] https:\/\/www.comodo.com\/<\/a><\/p>\n [3] https:\/\/transparencyreport.google.com\/safe-browsing\/search<\/a><\/p>\n [4] https:\/\/www.phpmyadmin.net\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"