Website hack ho gayi kya kare: pehle ghante se Google warning hatane tak

Website hack ho gayi kya kare: pehle 15 minute

Website hack ho gayi kya kare, iska pehla jawab hai: ghabraiye mat, aur files delete karna mat shuru kijiye. Pehle 15 minute mein sirf teen kaam kijiye jo hacker ko aur nuksaan karne se rokein aur saboot bachayein. Jaldbaazi mein files hatane se woh saboot bhi mit jaata hai jisse pata chalta ki hacker andar kaise aaya.

Pehla kaam passwords hai. Kisi aise device se jo saaf ho (jis computer par virus ka shak ho uspar nahi), hosting account, website admin (WordPress ya jo bhi CMS), FTP ya SFTP, database, domain registrar aur us email ka password badliye jisse ye accounts jude hain. Jahan ho sake two-factor login on kijiye.

Doosra kaam hosting support ko ek chhota message: “Meri website hack lag rahi hai, kya aapke logs mein kuch dikha?” Kai hosting companies ke paas malware scan aur access logs hote hain. Teesra kaam: agar site customers ko kisi nakli page par bhej rahi hai, toh hosting panel se ek maintenance page laga dijiye, taaki aur log phansein nahi.

• Saaf device se saare passwords badliye: hosting, admin, SFTP, database, domain, email
• Two-factor login on kijiye jahan uplabdh ho
• Hosting support ko message kijiye
• Redirect ya phishing ho toh maintenance page lagaiye
• Abhi koi file delete mat kijiye

Pehla ghanta: backup utaariye, hacked haalat ka bhi

Ajeeb lagta hai, par hacked website ka bhi poora backup lijiye: saari files aur database, ek alag folder mein, “hacked” naam ke saath. Yeh saboot hai. Isse baad mein pata chalta hai ki kaunsi files badli gayi, kab badli gayi, aur kya koi customer data bahar gaya. Ise live server par mat rakhiye; apne computer ya cloud storage mein alag rakhiye.

Phir dekhiye aapke paas saaf backup kaunsa hai. Hosting ke automatic backups, aapke apne backups, ya developer ke paas koi copy. Har backup ki date likhiye. Agar aapko andaza hai ki hack kab shuru hua (jaise jis din Google warning aayi ya customer ne shikayat ki), toh usse pehle ka backup sabse kaam ka hai, par yaad rakhiye ki hacker aksar hafton pehle andar aa chuka hota hai.

Google ki apni guidance bhi yahi kehti hai ki cleanup se pehle poori site ka backup lijiye aur jo files hataate hain unki offline copy rakhiye. Yeh backup restore ke liye nahi, samajhne ke liye hai.

Kaise pata karein ki website hack hui hai? Lakshan aur check

Hack hamesha khule tareeke se nahi dikhta. Kai baar website aapko normal dikhti hai, par Google se aane wale visitors ko spam site par bhej diya jaata hai, ya Google mein aapke domain par hazaaron ajeeb pages dikhte hain. Isliye apni aankh ke saath kuch tools se bhi check kijiye.

Google par site:aapkadomain.in search kijiye. Agar Japanese text, dawaiyon, betting ya nakli brand ke products wale pages dikhte hain jo aapne nahi banaye, toh site hack hai. Google Search Console mein Security Issues report dekhiye; Google ke help page ke mutabik yeh teen tarah ki problems dikhata hai: hacked content, malware aur unwanted software, aur social engineering (jaise phishing). URL Inspection tool se kisi page ka woh roop dikhta hai jo Google dekhta hai, jo cloaking pakadne mein kaam aata hai.

• Mobile se Google result par click karne par site kisi aur site par chali jaati hai
• site: search mein Japanese, pharma ya betting pages
• Browser mein “Deceptive site ahead” ya “This site may be hacked” warning
• Admin mein anjaan users, ya aapka password kaam nahi kar raha
• Hosting ne account suspend kiya ya spam email ki shikayat aayi
• Homepage ka design ya text badal gaya (defacement)
• Search Console mein anjaan owner jud gaya

Spam redirect: website doosri site par kyun khul rahi hai?

Spam redirect mein hacker aisa code daalta hai jo kuch visitors ko, aksar sirf mobile ya sirf Google se aane walon ko, betting, dating ya nakli offers wali site par bhej deta hai. Aap seedha URL type karte hain toh site normal khulti hai, isliye owner ko der se pata chalta hai. Customer ki shikayat ya Google warning se hi pata chalta hai.

Yeh code aam taur par teen jagah milta hai: server ki .htaccess file mein rewrite rules, theme ki header ya functions file mein, ya database mein kisi setting ya post ke andar chhupi script ke roop mein. Google ki hack cleanup guide bhi .htaccess ko pehle check karne aur usko saaf version se badalne ki salah deti hai, aur PHP files mein base64_decode, eval ya gzinflate jaise chhupe code patterns dhoondhne ko kehti hai.

Sirf redirect wali line hataane se kaam nahi banta. Hacker ne jahan se andar aakar yeh line daali, woh darwaza khula hai toh line kal wapas aa jayegi. Isliye redirect hataane ke saath yeh bhi dhoondhna zaroori hai ki kaunsa purana plugin, theme ya chura hua password raasta bana.

Website par Japanese pages aa gaye: Japanese keyword hack kya hai?

Japanese keyword hack mein aapke domain par random folder names ke andar Japanese text wale naye pages ban jaate hain, jo nakli brand ke saamaan bechne wali sites ke affiliate links se bhare hote hain. Google ke web.dev par isi hack ki poori cleanup guide hai. Yeh pages Google Search mein aapke naam se dikhte hain aur aapki site ki saakh girate hain.

Iske saath milte-julte hack bhi hote hain. Gibberish hack mein keywords se bhare bekaar vakyon wale bahut saare pages bante hain jo visitors ko kisi aur page par bhejte hain. Cloaked keywords hack mein pages aapke template jaise dikhte hain, isliye pehli nazar mein asli lagte hain. Google ke guide ke mutabik agar Search Console mein koi anjaan owner jud gaya ho, toh uska access hataiye aur uska verification token bhi delete kijiye.

Safai ke baad bhi Google mein yeh pages kuch samay dikhte hain. Jo spam URLs ab 404 ya 410 dete hain, woh dheere-dheere index se hatte hain. Sitemap mein koi spam link ho toh hataiye, aur asli sitemap dobara submit kijiye. Search Console ka removals tool jaldi chhupane mein madad karta hai, par asli fix server par safai hi hai.

Safai karein ya backup se restore: kaise tay karein?

Agar aapke paas hack se pehle ka pakka saaf backup hai aur uske baad site mein bahut kam badlav hua hai, toh restore sabse tez raasta hai. Par restore ke turant baad updates chalaiye aur passwords badliye, warna wahi purana kamzor plugin wapas aa jaata hai aur hacker usi raaste se dobara aata hai.

Agar backup purana hai, ya pata hi nahi kab hack shuru hua, ya backup bhi infected ho sakta hai, toh safai zaroori hai. Safai ka matlab hai CMS core ko official saaf copy se badalna, har plugin aur theme ko uske official source se dobara daalna, uploads folder mein PHP files dhoondhna (wahan PHP ka hona aam taur par ghalat hai), database mein chhupi scripts aur anjaan admin users hatana.

Kai baar teesra raasta sabse samajhdaar hota hai: saaf content (text aur images) nikaal kar nayi, halki site banana. Jab site purani ho, dozens purane plugins hon aur baar-baar hack ho rahi ho, toh har baar safai se sasta naya static site ₹10,000 se pad sakta hai.

WordPress website hack ho gayi: safai ke kadam

Hacked WordPress site ki safai kram se hoti hai. Pehle admin users ki list dekhiye aur anjaan admin hataiye. Phir WordPress core ko wordpress.org se taaza copy se badliye (wp-content aur wp-config.php chhod kar). Har plugin aur theme ko official source se dobara install kijiye, aur jo plugin istemal nahi hota use hata dijiye. Nulled ya crack kiye hue premium plugins turant hataiye; yeh aksar khud hi hack ka raasta hote hain.

wp-content/uploads mein koi .php file hai toh use dhyaan se dekhiye; images ke folder mein PHP ka kaam nahi. wp-config.php mein anjaan code dekhiye aur security keys badliye, taaki saare purane login sessions khatam ho jaayein. Database mein options aur posts tables mein anjaan script tags dhoondhiye.

WordPress ki official hardening guide kuch aur baatein kehti hai jo safai ke baad zaroor kijiye: purane versions ko security updates nahi milte isliye sab updated rakhiye, two-factor authentication lagaiye, “admin” jaisa aam username mat rakhiye, SFTP use kijiye, aur wp-config.php mein DISALLOW_FILE_EDIT on karke dashboard se code editing band kijiye. Hack ke baad “critical error” aa raha ho toh WordPress critical error fix dekhiye.

Google par “This site may be hacked” warning kaise hataye?

Google ki warning tab hatti hai jab aap site poori tarah saaf karke Search Console se review maangte hain. Google ke Security Issues help page ke mutabik kadam hain: report mein issue kholiye, poori site par problem theek kijiye (sirf udaharan wale URLs par nahi), phir “Request Review” dabakar likhiye ki aapne kya theek kiya. Google ke hi shabdon mein zyada tar reviews mein kuch din ya kuch hafte lag sakte hain.

Review request mein saaf aur imaandaar likhiye: kya mila (jaise “uploads folder mein 14 PHP files aur .htaccess mein redirect rule”), kya hataya, kya update kiya, aur dobara na ho iske liye kya kiya. Adhoori safai par review bheja toh Google use reject kar sakta hai aur agla review aur der se hota hai.

Browser ki laal “Deceptive site ahead” screen Google Safe Browsing se aati hai, aur woh bhi Search Console review ke baad hat-ti hai. Agar aapka antivirus ya kisi doosri security company ka blacklist bhi site ko block kar raha hai, toh unke paas alag se review form hota hai. Warning hatne ke baad asli pages ki ranking wapas aane mein bhi samay lag sakta hai.

Kya website hack ki report CERT-In ya police ko karni chahiye?

Kuch cases mein haan. CERT-In (Indian Computer Emergency Response Team) ne 28 April 2022 ko IT Act ki Section 70B(6) ke tahat directions jaari ki thi, jinke hisaab se service providers, intermediaries, data centres, body corporates aur sarkari sansthaon ko kuch khaas cyber incidents notice hone ke 6 ghante ke andar CERT-In ko report karne hote hain. Is list mein website defacement, website mein ghuspaith, malicious code daalna, data breach aur phishing jaise incidents shamil hain.

Aapka business in directions ke daayre mein aata hai ya nahi, aur report kaise karni hai, yeh kanooni sawal hai; iske liye apne vakeel ya CA se baat kijiye. Hum kanooni salah nahi dete, par report ke liye zaroori technical jaankari, jaise kab kya mila aur kaunsi files badli, likh kar de sakte hain.

Agar hack se paise ka nuksaan hua, customers ke saath fraud hua, ya aapko blackmail kiya ja raha hai, toh Grih Mantralaya (MHA) ke National Cyber Crime Reporting Portal, cybercrime.gov.in, par shikayat darj kar sakte hain. Hacked haalat wala backup yahan saboot ke roop mein kaam aata hai.

Customers ka data chori hua ho toh kya karein?

Agar aapki website par customer accounts, orders, phone numbers ya form enquiries save hote the, toh yeh dekhna zaroori hai ki hacker ne database tak pahunch banayi ya nahi. Access logs aur database ke badlav se kuch andaza lagta hai, par pakka kehna mushkil hota hai. Card numbers aapki site par save hi nahi hone chahiye; agar aap gateway ka hosted checkout use karte hain toh card data aapke server tak aata hi nahi.

Agar data bahar jaane ka shak hai, toh customers ke passwords reset karwaiye, aur apne vakeel se poochiye ki customers ko ya kisi authority ko batana zaroori hai ya nahi. India ka Digital Personal Data Protection Act aur uske niyam personal data breach ke baare mein zimmedariyan tay karte hain; aap par kya laagu hota hai, yeh kanooni salah ka vishay hai.

Website hack kaise hoti hai? Chhote business ki sabse aam wajah

Chhote business ki websites zyada tar kisi ne khaas nishana bana kar hack nahi ki hoti. Automated bots internet par lagatar purane plugins, kamzor passwords aur khule admin pages dhoondhte rehte hain, aur jo mil jaaye use hack kar lete hain. Isliye “meri chhoti si site kaun hack karega” wali soch galat hai.

Sabse aam darwaze: purane, bina update ke plugins ya themes; nulled (chori ke) premium plugins jinmein pehle se backdoor hota hai; “admin123” jaise password jo doosri jagah bhi use hote hain; purana developer jiska login abhi bhi chalu hai; shared hosting par ek hi account mein kai purani sites jinmein se ek hack hui toh sab; aur saadha FTP jismein password encrypt nahi hota.

• Purane plugins/themes jinmein jaani-maani kamzori hai
• Nulled premium plugins aur themes
• Kamzor ya dohraaye gaye passwords
• Purane developers ya staff ke chalu logins
• Ek hosting account mein kai bhooli hui purani sites
• FTP bina encryption ke

Website hack hone se kaise bachaye: dobara na ho, iska plan

Safai ke baad asli kaam hai darwaze band karna. Sab kuch updated rakhiye, istemal na hone wale plugins aur themes hataiye, har user ko alag login aur sirf zaroori permission dijiye, two-factor login on rakhiye, aur purane developers ke access hataiye. Dashboard se code editing band kijiye aur SFTP use kijiye.

Backups ko regular aur offsite rakhiye, yaani hosting se alag jagah, aur mahine mein ek baar restore karke check kijiye. Uptime monitoring aur Search Console ke email alerts on rakhiye taaki agli baar problem ka pata ghanton mein chale, hafton mein nahi. Web application firewall bhi ek parat hai, par updates ki jagah nahi le sakta.

Yeh kaam aap khud bhi kar sakte hain, ya hamare maintenance plan mein ₹8,000/mo se. Naye build par pehle 2 mahine yeh free hota hai. Saalana kharche mein security ka hissa kitna rakhein, yeh website ka yearly kharcha page par hai; wahan yeh bhi hai ki kaunse kharche kabhi band nahi karne chahiye.

Online store hack ho gaya: payment aur orders ka kya?

Online store hack ho toh sabse bada khatra checkout page ka hai. Hacker payment page badal kar customers ko nakli page par bhej sakta hai, ya order ke baad customer ko nakli UPI ID dikha sakta hai. Isliye store hack ho toh sabse pehle checkout ko band kijiye ya maintenance mode lagaiye, aur payment gateway ke dashboard mein dekhiye ki settlement account aur API keys badle toh nahi.

Gateway ki API keys ko naya bana lijiye (regenerate), purani band kijiye, aur webhook secret bhi badliye. Pichhle kuch dinon ke orders ko gateway ke transactions se milaiye taaki pata chale koi payment ghalat jagah toh nahi gaya. Customers ko agar kuch galat dikha hai toh unhe saaf batana bharosa bachata hai. Payment setup ka surakshit tareeka website me payment gateway kaise lagaye par hai.

Hacked website help across India: shehar aur business

Hack ka tareeka har shehar mein ek jaisa hai, par nuksaan business par nirbhar hai. Gurgaon ke startups aur corporate service providers ke liye client data aur saakh sabse badi chinta hai. Chennai ke manufacturers aur hospitals ki sites par enquiry forms aur appointment data hote hain. Indore ke traders aur Bhopal ke coaching institutes ke liye admission ke mausam mein site down hona sabse mehnga padta hai.

Dehradun ke schools aur hotels, Udaipur ke heritage hotels aur wedding venues, aur Thiruvananthapuram ke Ayurveda resorts ki booking sites par spam redirect seedha bookings rokta hai. Patna aur Ranchi ke coaching centres aur clinics ki purani WordPress sites aksar purane plugins ki wajah se hack hoti hain.

Hum kisi shehar mein office nahi rakhte aur site visit nahi karte. Emergency mein bhi saara kaam remotely hota hai: aap hume alag login dete hain, hum safai karte hain, aur kaam ke baad aap woh login hata dete hain.

Ek misaal: Madurai ke clinic ki WordPress site par Japanese pages

Yeh kaalpanik misaal hai, kisi asli client ki kahani nahi. Maan lijiye Madurai ke ek dental clinic ki WordPress site hai jo teen saal pehle bani thi. Ek din patient batata hai ki Google par clinic ka naam search karne par Japanese mein kuch ajeeb results dikh rahe hain. Search Console mein Security Issues report mein “Hacked: URL injection” likha hai.

Kram yeh hoga. Pehle saare passwords badle jaate hain aur hacked haalat ka poora backup liya jaata hai. site: search se spam URLs ki list banti hai. Jaanch mein milta hai ki ek slider plugin chaar saal se update nahi hua tha, uploads folder mein kuch PHP files hain, .htaccess mein ajeeb rewrite rules hain, aur ek anjaan admin user hai. Search Console mein bhi ek anjaan owner juda hai.

Safai: anjaan owner aur admin hataaye jaate hain, WordPress core aur plugins official copy se dobara, slider plugin hata kar theme ka banner, .htaccess saaf, uploads se PHP files hataayi, security keys badli, two-factor on. Phir review request mein poori list. Google ka review kuch din ya hafte le sakta hai. Uske baad maintenance ₹8,000/mo se, sirf agar clinic chahe. Koi guarantee nahi ki ranking kab lautegi, par darwaza band hai.