developer1 Posted 10 hours ago Posted 10 hours ago Hello, i'm on the Morty plan and I got a mail from you yesterday that one of my sites that uses Wordpress was hacked and so my entire account has been suspended. I would like to request that my account be unsuspended as i have many other sites on it which are not affected and which rely on being online. I would appreciate it if the particular affected site is preferably brought down for maintenance but all my other sites which have been carefully curated and such are still left as they were. I look forward to your speedy intervention. I would also like to ask in future if it's possible in such cases that the specific site be suspended instead of suspending an entire account. Thanks. Quote
wolstech Posted 3 hours ago Posted 3 hours ago Our policy is typically to require the entire account be reset without a backup to destroy the contents before you can recover a hacked account (in case phishing or similar was set up and stolen information is present), though after looking through your account I don't see anything suspicious outside of the one domain that was compromised (lda.ng). Are you OK with deleting the contents of the domain lda.ng and the associated WP database to be unsuspended? Quote
developer1 Posted 1 hour ago Author Posted 1 hour ago wow, please don't reset as i haven't performed a full backup. i am okay with clearing/deleting the contents of the lda domain etc. for it to be unsuspended. Once restored i will create a full backup of the entire account so that i can avoid any major losses going forward. I would appreciate it if you can Kindly pin point me to an article/guide on how to do a wholistic backup for the whole account so i can reduce my exposures. Also any further information on how this attack was perpetuated/what exactly was affected, will go along way. Thanks! Quote
wolstech Posted 1 hour ago Posted 1 hour ago The contents of the domain lda.ng have been discarded, the associated WP database developer1_lda has been dropped, and you've been unsuspended. Your account may take up to 2 hours to function fully. The attack came in through Wordpress itself, which is usually either a result of plugins with vulnerabilities, or failure to install updates. A backup from February actually does exist for your account at https://heliohost.org/backup/ if you need anything from that timeframe. You can make backups using the backup tool in Plesk. Note that if you use this, it is advised that you configure remote storage, as the backups it creates count towards your disk space quota and can quickly cause you to run out of space. Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.