My site was compromised with cryptolocker

  • One of my WordPress websites got attacked with a so called Cryptolocker—a ransomware trojan which usually encryptes files on Windows machines which get decrypted again after paying some bitcoins (of course we will not pay).

    First thing I thought of was that the server itself may be affected. But the host now told me they’re not running windows (the client chose the host—yeah, i know).

    I didn’t find anything on the web regarding those Cryptolocker things and WordPress or web servers. Was anybody here attacked by one of those things on his webspace/server, CMS or something other than a “normal” Windows PC?

    Here’s the text those guys left in my upload folder together with encrypted files:
    https://pastebin.com/mpcHiLkm

Viewing 5 replies - 1 through 5 (of 5 total)
Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘My site was compromised with cryptolocker’ is closed to new replies.