Warning "Altitude Pro" may be vulnerable to malware hackers

[Toby39]

Hi folks,
I don't wish to alarm but several of my sites have recently be infected with malware, in the form of spammy links that auto-redirect the site to a spammy site.

The site I was most recently working on used a version of Altitude Pro, using a 2015 version that I uploaded (I know... not the lastest version which seems to be 2018).

At this time I cannot be certain what has caused the security breach. It may not be the theme, it may be a plugin, or perhaps something else.

I am waiting for HostGator to investigate and get back to me. I will report here when I hear from them.

Has anyone experienced the same problem with their sites recently.
Please feel free to comment.

[Victor Font]

I wouldn't worry too much about this. Of all the potential entry points on a server, especially in a shared hosting environment, a child theme is the least likely penetration point.

---

Regards,

Victor
https://victorfont.com/
Call us toll free: 844-VIC-FONT (842-3668)
Have you requested your free website audit yet?

[Toby39]

Thanks victor,
What do you think most likely caused the breach?

I first noticed the problem when I navigated to either my home page, or a post. The page would auto redirect to some other website. When this happened, the first URL I saw in the browser address bar was adrequest[dot]xyz/lady[dot]php, and then I saw it change again to the URL of another site which then loads up.

I changed all my passwords to hosting, WP site admin and db, and removed the javascript spam code using PHPMyAdmin in hostgator, but I then noticed a new spam link replace the old one! Many of my sites are now infected, but not the ones protected by Directory Security passwords using hostgator CP.

How the hell did they get in!? - a plugin perhaps?

[Author]

Posts