.htaccess file added to every folder

[Jim Byrne]

Hi, Discovered one of my site has been hacked. A .htaccess file has been added to every folder. the file contains the following code:

<FilesMatch '.(py|exe|phtml|php|PHP|Php|PHp|pHp|pHP|pHP7|PHP7|phP|PhP|php5|suspected)$'>
Order allow,deny
Deny from all
</FilesMatch>

I think other files have been compromised. It looks like the entire site needs to be cleared out and redone.

Have oyu had any reports of where this is coming form – or what plugin has been compromised as I have a lot of websites and it would be a huge disaster to have them hacked. Thanks, Jim

[AITpro Admin]

Typically a website/hosting account has been hacked for months to years before a website owner becomes aware that the hosting account is hacked.  Typically if one of your websites under a hosting account is hacked then you need to clean up your entire hosting account.  Use the hosting account hack clean up steps here > https://forum.ait-pro.com/forums/topic/wordpress-hacked-wordpress-hack-cleanup-wordpress-hack-repair/

[Author]

Posts