A boutique advisory client's two WordPress sites were compromised through administrator access left over from the freelancer who built them: rogue admin accounts, gambling spam, and a file-manager backdoor. A full forensic remediation evicted the operator and cleaned and hardened both sites.
Read Details
An aged-care provider's WordPress site kept reinfecting after prior cleanups, with gambling spam and Search Console hijacks returning. The cause was database malware, two backdoors, and a stolen admin credential.
Read Details
How WordPress sites actually get hacked, what malware does once it's in, what cleanup means, and how to tell whether the advice you're getting is sound. Written for owners who run their own site and for owners working with a developer or agency.
Read Details
WordPress malware cleanup pricing in 2026, broken down by real-world scenarios. What straightforward cleanups cost, what serious compromises cost, and what changes the number.
Read Details
If your site has been hacked and you've found a suspicious file, deleting it is often the wrong first move. Here's why — and what to do instead.
Read Details
A real estate agent hired me to fix email spoofing. What I found was an actively compromised WordPress site with four hidden backdoors, concurrent attacker sessions, and wire fraud attempts targeting his closings — all running silently for over two years.
Read Details
Your staging site loads. Now what? The hardening, backups, and database sync work most migration guides skip.
Read Details