WordPress Support user being created on my website?

  • Resolved gemkt

    (@gemkt)


    1 year, 11 months ago

    Recently I have been seeing that a user is created on my websites with the name MUWY and email [email protected] who has an administrator profile. No matter how much I erased it, it reappears. This happens to me on three sites that I have on the same server at DigitalOcean and all three use WordPress. Does anyone know what is going on? I have already asked all the users of the sites to change their passwords and change the DigitalOcean password but it keeps appearing.

Viewing 7 replies - 1 through 7 (of 7 total)

  • Deactivate all plugins and check if this still happens. Since the email is very clear, I would spontaneously guess the plugin JetPack – but I could be wrong.

    Same issue here, same username MUWY and same email [email protected]. Completely new site with new passwords, no strange plugins, no jetpack.

    Any idea how to fix this?

    • This reply was modified 1 year, 10 months ago by dva78.

    same problem for some of my websites with this new admin user!

    @dva78 and @johanna75: please open your own topic for your own issue: https://www.ads-software.com/support/forum/miscellaneous/#new-topic-0

    This is happening on our end as well. One site in particular keeps having this happen.

    not sure which plugin is doing this.

    Same thing here. No new plugins installed

    Thread Starter gemkt

    (@gemkt)

    Hi!

    After two months, I finally was able to stop it from appearing. It wasn’t an easy task, but i realized that my website was hacked through an abandoned?plugin in some way.

    First of all, I installed the plugin Wordfence to scan all the suspicious files and malware, then I fixed the files that i was able to understand (did a backup first) and, finally, with the help of a backed developer, I was able to erase malicious functions on the code of various files through an SSH sesion on the website server.  

    Most of the infected files that allowed them to create the user were on themes, upload elements and random stuff i didn’t recognize.

    I suggest you start by installing Wordfence and running a scan so you know where the error may be and make sure you don’t have inactive plugins or themes that may damage your code.I know this solution may be hard to implement for some people, but that was what it worked for me. 

    Good luck to everyone!

Viewing 7 replies - 1 through 7 (of 7 total)
  • The topic ‘WordPress Support user being created on my website?’ is closed to new replies.