My site was hacked or has malware — what do I do? Print

Act quickly to limit damage. First, change every password: cPanel, FTP, email, database, and any CMS admin accounts from your client area and cPanel.

1. Run a scan with Imunify360 in cPanel to detect and clean infected files.
2. Update your CMS, themes, and plugins to the latest versions, and remove anything unused.
3. Restore from a clean backup if you have one from before the infection.
4. Check for unknown admin users, scheduled cron jobs, and modified .htaccess files.

If you can't fully clean it or aren't sure, open a ticket right away and describe what you've seen. Our team can scan your account, isolate malicious files, and advise on next steps. After cleanup, keep everything patched to prevent reinfection.