Prestashop under hacker attack, help!

[Juanaco]

Hi, 2 weeks ago we have began to suffer attacks by some Hacker, the first one affected our cart and it made that when you are going to complete your purchase it redirects to another payment website, we have solve it by making a back up of the entire website, after that we have installed a security module (security pro) and also we have take some recommendations such as delete the vulnerability in smarty, alas we have been attacked another time, now the hacker is somehow injecting code via the comments in prestaBlog, we are removing all the comments but we don't know how to proceed 😔 any ideas and suggestion on how to avoid further attacks and also how to get rid of this actual hacker?

Thanks

[Prestachamps]

Hi @Juanaco,

you should also ask your hosting to install the Imunify 360, or at least run the ImunifyAv manually, to detect anc lean all hacked files from your site(or use some virus detection on your server)Also they can check from the access log when and how the hacker got access to the site.

After clearing all your hacked files, you should change all your passwords from backoffice employees, and also from the cpanel/hosting access passwords.

Have a nice day, Leo.

[juanrojas]

hello, for the topic of comments you need a recaptcha module for example this one, but I'm not sure it will work for this prestablog

[ZIKODK]

8 hours ago, juanrojas said:

hello, for the topic of comments you need a recaptcha module for example this one, but I'm not sure it will work for this prestablog

Recapture modules does not prevent hacking.

[solsol69]

 

hello

Maybe a solution here

or here

 

[Nickz]

hopefully you have a backup and a reserve server.

[El Patron]

PrestaHeroes Solution

Our FileStasis Attack Surface Monitor(ASM) + Restore for PrestaShop module will 1) build vault of mission critical files 2) monitor and report when file changes/additions/deletions are found, allows you to commit trusted change to vault or restore untrusted change from vault.

The most important part of detecting hack is knowing which files changed, that is the purpose of this module.

https://prestaheroes.com/products/prestavault-malware-trojan-virus-protection?variant=40653346635983