Scanning WordPress For Different Types of Security Issues

When you’re logging into different client sites everyday, you learn very quickly why so many sites are vulnerable to being hacked.

One of the main reasons is the username and password strength being very weak.

Many people use their name and then a number like brad67 as their password and then they keep the default username as admin.

So what happens when you get hacked?

How do you know your site has been injected with malware or compromised in some way?

Do you know how to check your site for signs of different types of hacking including:

• Drive-by Downloads
• Phishing Attacks
• Spyware
• Viruses
• Heuristically-Detected Virus
• Worms
• Unsolicited Browser Changes
• Suspicious Browser Changes
• Dialers
• Trackware
• Joke Programs
• Suspicious Application

In this tutorial, i’ll show you some of the best ways to easily find out if your database and files have been hacked and injected with malicious code.

Securi Security Scan

Let’s take a look at what you get when you use Securi sitecheck.

Securi Sitecheck – This is a free & premium service which quickly scans your site for malicious software and signs of hacking. The only problem is, the free service only scans a limited amount of your sites url’s.

Disclaimer: Sucuri SiteCheck is a free & remote scanner. Although we do our best to provide the best results, 100% accuracy is not realistic, and not guaranteed.

Google Safe Browsing – Check to see if your domain is clean by replacing the domain with your own on the end of this url:

http://safebrowsing.clients.google.com/safebrowsing/diagnostic?site=example.com

Norton Safeweb – Another free scan which performs tests on your computer and offers recommendations based on the results.

Phish Tank – You can check your domain here to see if its subject to a fraudulent attempt, usually made through email, to steal your personal information.

Site Advisor – McAfee’s SiteAdvisor free software adds safety ratings to your browser and search engine results.

Sucuri Malware Labs – Check out the latest malware entries for Iframes, redirectiors and javascript. For each one you can click on the domain for more information, IP addresses and details on the malware.

Web Site Blacklisting –  Checks for sites distributing malware, being used for spam campaigns and redirections caused by injections of malicious code.

Yandex – Checks your site for malware and viruses.

Best Ways To Secure WordPress

Here’s a post i wrote earlier showing you at least 10 ways to secure your WordPress site from being hacked.