Cybersecurity
Store Malware Cleanup
A malware cleanup for an online store, followed by server hardening, file change monitoring and backups.
- Service
- Cybersecurity
- Technology
-
- WordPress
- WooCommerce
- Nginx
- Backups
01
The challenge
An online store found scripts it had never added running on its pages, along with admin users nobody recognised. The owners did not know how the attackers got in or what else had been changed.
02
What we built
We removed the malicious code from the theme, plugins and database, deleted the unknown admin accounts and found and closed the way the attackers got in. Every password, API key and database credential was rotated. We then hardened the server configuration, set up file change monitoring that alerts the team to unexpected edits and scheduled automated backups.
03
The result
The store is clean and customers check out without hidden scripts on the page. The team now hears about any unexpected file change straight away, and a recent backup is always ready to restore.