{"id":7748,"date":"2015-09-24T13:22:14","date_gmt":"2015-09-24T17:22:14","guid":{"rendered":"http:\/\/dandelionwebde.wpengine.com\/?p=7748"},"modified":"2017-08-03T16:27:17","modified_gmt":"2017-08-03T20:27:17","slug":"may-be-hacked","status":"publish","type":"post","link":"https:\/\/dandelionwebdesign.com\/may-be-hacked\/","title":{"rendered":"3 things you need to do when Google suspects “This site may be hacked”"},"content":{"rendered":"

<\/a>If Google ever suspects that your website has been hacked they will begin to warn potential visitors in the search results. Needless to say, if Google search results label your website\u00a0as hacked — it is very bad for business.<\/p>\n

When Google thinks your\u00a0website has been hacked you need to do 3\u00a0things:<\/strong><\/p>\n

    \n
  1. Determine if the site really was hacked and if so clean it up!<\/li>\n
  2. Tell Google that the site is clean and that the message can be removed.<\/li>\n
  3. Ensure that the\u00a0site is secure going forward.<\/li>\n<\/ol>\n

    How to\u00a0approach the problem<\/h2>\n

    We recently received the following\u00a0email. \u00a0(NOTE:\u00a0email has been edited to protect client privacy<\/em>)<\/p>\n

    “I received a call from a customer<\/em> wishing to register for our event<\/em>\u00a0and she was concerned because the google search indicated that; “the site might be hacked” — Sure enough when I googled my business<\/em> a “This site may be hacked” <\/strong>message\u00a0<\/em>comes up right below our website in the Google search results. Help!”<\/p><\/blockquote>\n

    Has your\u00a0WordPress website has been flagged by Google? Walk through the steps we used to resolve the situation for this client.<\/p>\n

    [clickToTweet tweet=”If Google search displays – This site may be hacked – visitors won’t click! Here’s the fix pic.twitter.com\/3vgU1WK6OX” quote=”If Google search displays – This site may be hacked – visitors won’t click! Here’s the fix”]<\/p>\n

    1. Connect by FTP<\/h3>\n

    We always begin by obtaining hosting FTP access to the site. We never add any plugins or update any website without first ensuring that we can connect by FTP. Once we’re sure that we can connect, we are ready to move on to step two.<\/p>\n

    2. Add the site to Google’s Search Console:<\/h3>\n

    Recently Google rebranded Webmaster Tools<\/em> as Google Search Console<\/em>. Search Console is a free service. It is how you can submit a sitemap to\u00a0notify Google to crawl your website\u00a0content.<\/p>\n

    To verify the site you\u00a0need to upload a verification file by FTP to the host server. Once the site is verified your site you will receive notices directly from Google about any website issues.<\/p>\n

    Notices such as this one: Hacking suspected:<\/strong><\/p>\n

    Unfortunately, it appears that your site has been hacked. A hacker may have modified existing pages or added spam content to your site. You may not be able to easily see these problems if the hacker has configured your server to only show the spam content to certain visitors. To protect visitors to your site, Google\u2019s search results may label your site\u2019s pages as hacked. We may also show an older, clean version of your site.<\/em><\/p>\n

    In Search Console check the Security Issues<\/em> to see details of sample URLs that may be hacked. In this case, all the URLs listed related directly to a single plugin.<\/p>\n

    3. Login to WordPress<\/h3>\n

    When we logged in we found 16 WordPress updates had to be done. \u00a0We checked,\u00a0and fortunately, there were regular backups. We knew that we could restore the site should something go wrong so we proceeded to update all the plugins, themes and WordPress core files.\"The<\/a><\/p>\n

    We could tell from the Google Search Console that the issue seemed to be coming from a specific URL which was connected to a specific plugin. We then checked the suspect plugin and found that the client wasn’t even using it. This was an old plugin that they had abandoned but never removed from their site. We deactivated and deleted the plugin.<\/p>\n

    WordPress Tip:<\/strong> The Yoast SEO Plugin now includes the\u00a0Search Console. You can keep tabs of Google error notifications in WordPress. While we were at it, we set this up for the client.<\/p>\n

    We ran a malware scan and no problems were detected.<\/p>\n

    4. Let Google know that all is well<\/h3>\n

    Now back to Google Search Console<\/p>\n