If you suspect your site has been compromised, act quickly:
- Change all passwords immediately — your control panel (DirectAdmin or cPanel), WordPress admin, FTP, and database users.
- Restore from a recent clean backup if you have one, via the Backup tools in your control panel.
- Update everything — CMS core, plugins, and themes are the most common entry points when left outdated.
- Scan for malware using your control panel's security tools if available, or a reputable malware scanner plugin.
- Open a support ticket with us — our team can help identify malicious files and, if needed, temporarily suspend affected services to protect other customers.
Going forward, keep software updated and use unique strong passwords to reduce the risk of it happening again.
