WORDPRESS website hacked by ZeroBurnner

[Sarathi]

I have a website that has been hacked by ZeroBurnner - anyone have any ideas how to deal with that?

Site Runs WORDPRESS.

[RichCor]

Generally ZeroBurnner et. al. goes after sites that are easy to hack, has default passwords, or easy to guess (like, root / toor )

While you can TRY to delete the material they put in place, your best bet would be to:

Change all your working passwords (FTP, ControlPanel, DataBase, etc.) EVERYTHING!!

Back up the site, to keep as much original material for possible later recovery

Erase the site, so no code left behind can reinfect the site

Update/upgrade all the working elements to the latest version, hopefully they'll be more secure than what you had

Follow suggestions for securing the site, best practices

Rebuild the site

Make sure any add-on elements/scripts you use are the latest versions and are good / clean

If the site is important to you, keep an ongoing backup of the site (code and databases)

Then, if the site has issues you can recover from the backup, change the passwords, upgrade versions and verify security.

There is no magic button.