How Did We Repair & Secure Why Not Weekend From Malware Attack?

About Why Not Weekend

Why Not Weekend is a Miami-based tour & travel website that provides hotel packages, concerts, nightlife events bookings, and more at one place. It has a WordPress-based online platform that was running on version 5.6.

Clients Brief

The Why Not Weekend WordPress website (version 5.6) encountered a serious malware attack, malicious HTTP redirection, and traffic hijack. It was experiencing an unusual repetitive website redirection issue to an unknown URL. This severely affected their online business and day-to-day revenue.

They commissioned Tech9logy Creators for the purpose to restore and repair the malware attack.

Services We Provided 

WordPress Website Security & Malware Removal Services

Website Support And Maintenance Services

Challenges & Solution

1. Restore: Immediate Hack Recovery by Malware Removal –

We immediately recovered the website from the security breach by actively responding to the alarm. Clearing malware was our primary task; we scanned website data and removed the malware manually. The website was recovered from the hack within 5 hours. Below are the detailed steps:

1. We scanned the website to identify & clear all unknown folders & files.
2. We identified & removed a malicious plugin, Diamba, that was installed by the hacker. 
3. We removed all unknown scripts in header files.

2. Repair: Thorough Website Scanning to Identify Loophole & prevent bounce attacks

The website was experiencing extreme bounce attacks. While responding actively was the immediate need, preventing bounce attacks was the real challenge. So, we scanned the website to identify the cause of the security breach and provide a permanent solution. One of the key issues we came across was the lack of website maintenance. Following are the steps we undertook to secure their website against future attacks:

1. Updating to the latest WordPress 5.6.1 version
2. Removing unnecessary plugins, database & files
3. Updating the existing plugins & themes

3. Security: Additional Security Measures to keep the platform Safe & Secure Against Future Attacks

Further, our experts assisted clients in securing the platform and preventing future attacks. This included:

1. Installing WP iTheme Security Plugin that suited the organization’s requirement.
2. Updating credentials for admin, service & hosting.
3. Adding another security layer with Google RECAPTCHA.
4. Regularly checking for contact form RECAPTCHA details.
5. Adding 2FA (Two Factor Authentication).