Resources
Written by the people who clean hacked sites and servers every week. Answer-first, practical and in plain English.
Featured · WordPress security
If malware returns hours or days after a clean-up, something on the server is putting it back. This guide explains the persistence mechanisms behind re-infection, using a real (anonymised) incident.
Read the guideA webshell is a small script that gives an attacker a remote control panel on your server. Here is how they hide, how to find them and how to remove them without leaving a way back in.
What white-label website security means for a web agency, how the service fits around your client relationships, and what to check before you resell security under your own brand.
If malware returns hours or days after a clean-up, something on the server is putting it back. This guide explains the persistence mechanisms behind re-infection, using a real (anonymised) incident.
How UK malware removal is priced, what pushes the cost up, and how to compare a one-off clean-up with an unlimited monthly plan without being caught out by re-infection fees.
SEO spam hacks fill Google with thousands of fake pages under your domain while the site looks normal to you. Here is how to confirm the Japanese keyword hack or pharma hack, clean it properly and recover your search listings.
Visitors say your site sends them to fake prize, tech-support or crypto pages, but it works fine for you. This guide explains how redirect malware decides who to target, where it hides and how to remove it.
A practical containment and clean-up guide for hacked WordPress instances on AWS Lightsail: snapshots, firewall lockdown, Bitnami file paths and the checks that stop re-infection.
Card skimmers hide in your WooCommerce checkout and quietly copy customer payment details. Learn the warning signs, where skimmers hide, how to remove them and what your obligations are afterwards.
A practical walkthrough for cleaning malware from a cPanel or CloudPanel server: where infections hide on each panel, the commands to find them, and how to stop them returning.
A practical, prioritised WordPress hardening checklist covering accounts, updates, file permissions, server configuration, backups and monitoring, with the exact settings we apply on client sites.
Security plugins are useful, but they run inside the thing they are protecting. Here is exactly what they can and cannot see, and where server-side scanning fills the gap.
Not every website hack is a reportable breach, but many are. How to decide, what the ICO 72-hour clock means, and the forensic evidence you need to make the call.
Your site has just been hacked. This is the calm, practical plan for the first hour: what to do, in what order, and what not to touch.
A sober look at what well-known, attributable sources say about website attacks and malware, where the numbers are weaker than they look, and what to do with them.
How to get rid of Google's "This site may be hacked" and "Deceptive site ahead" warnings: confirm the problem in Search Console, clean the site properly and request a review.
From redirects and Google warnings to unknown admin accounts and rogue cron jobs, these are the 12 signs we see most often on hacked websites, and how to check for each.
On most VPS servers, sites share a user, a PHP pool and a database login. That is why one hacked site infects the rest, and why cleaning one site at a time never works.
Website malware is code planted on your site or server to serve the attacker, not you. Here is what it looks like, how it gets in and what to do about it.
Website attacks are cheaper, faster and more automated than ever. Here are the five forces behind the rise, and what each one means for how you protect your site.
A practical, step-by-step process for removing malware from a hacked WordPress site, from containment and evidence to database clean-up, root cause and hardening.
wp2shell is the pattern of turning WordPress admin or plugin access into a PHP webshell on the server. Here is how it works, how to find it and how to remove it properly.
Get protected with unlimited malware removal, 24/7 monitoring and hardening, or get emergency help right now.
or call 01932 593642