Fake Cloudflare CAPTCHA on WordPress? A real cleanup case
A real small-business case involving an intermittent fake security page, hidden admin access, direct file checks, backdoor removal and a final clean scan.
9 min read
Guides
WordPress security guides
What I have learned cleaning infected sites, written so you can follow it yourself. If you would rather not, I am a message away.
Not sure which of these you are dealing with? The free WordPress hacked checker looks for redirects, hidden spam links and cloaked pages from the outside. Once a site is clean, hardening is what stops the same way in being used again.
Four types of WordPress malware attacking small businesses
Pharma spam, SEO hacks, malicious redirects and card skimmers: what each one does, how to recognise it and what removing it involves.
12 min read
How to remove Japanese keywords from a hacked WordPress site
The Japanese SEO spam hack fills Google with pages you never wrote. Here is how to find it, remove it and get your search results back.
8 min read
Fixing a WordPress redirect virus
Your visitors land somewhere else entirely. This walks through locating the injected redirect and removing it without breaking the site.
10 min read
Rather I just did it?
Fixed £59 for standard sites, most cleaned within 24 hours. No fix, no fee.