PressPi Hacked!

My WordPress installation on my Raspberry Pi was hacked several months ago, and I think I’m still trying to undo the file effects.

On a semi-regular basis, although by no means based on anything obvious, the site breaks again. It always seems to be a new line of code (that I can’t decipher) in the index.php file. I delete (or comment out) that line, and everything works again… for a while.

When it’s broken, it seems completely broken. When restored, completely fine. I assume the code sets the Raspberry Pi up as some kind of potential zombie device, but it just seems completely down.

It looks like some of the JavaScript may have also been compromised, but that’s now been replaced with standard, default files.

No recommendations yet as far as plugins or services, as I’m still trying. In hindsight, it may have been better to have just deleted and started over with a completely clean installation… but I like my little Press Pi site even if it does only contain minimal information.


Posted

in

,

by

Tags:

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *