I dont care if nairaland deletes this post because I am posting their link. We have just been hacked by https://www.downloadfreethemes.co/
The sites contains large numbers of free themes and plugins for wordpress and other CMS platforms.

You can run a google search about the site in question about other sites that's been hacked by them.

Recently, all our EMAILS has been compromised. Hackers read all email got our private information on our blog. We also discovered that cpanel access of the blog has been compromised. Please do NOT DOWNLOAD any free THEME or PLUGIN from https://www.downloadfreethemes.co/

This is how it works.

Once you download their theme or plugin. They have a custom way to access your control panel of your iste through WP-INCLUDES Folder. By so oing, they gain access.

We were able to see the last login to the Control Panel. Attacker attacked our Blog, Email, Control Panel and Instagram account all in one day this early morning.

PLEASE BEWARE and do not download FREE THEMES.


[11-Nov-2019 04:47:41 UTC] PHP Warning: require(/home/xxxxxxxx/public_html/wp-includes/post.php): failed to open stream: No such file or directory in /home/xxxxxxxx/public_html/wp-settings.php on line 166


Always go to WORDPRESS PLUGINS/ THEMES to get your theme for your blog or plugins.


Please check the screenshots of the attack below.

Thank you.

Well, lesson learnt. If you can't afford to buy a premium plugin, don't cut corners, it's risky especially if your website is an online store.

To get your cpanel login details back, you will need to contact your hosting company and have them change it for you and from there, you can uninstall the corrupted plugin but I'll advice you look at other files too. Sometimes attackers create backends as soon as they have successfully gained access to your website. They create the backends in case you take preventive measures.

As for the Instagram, contact Nina. On a more serious note, if your email has been changed then you will need professional help to regain the account or you send a mail to Instagram. It will take days before they reply and they will ask you for some technical details.

Just to brag a little, I was the one that helped Nina regain her Instagram account about a year ago.

Always upload and scan any free premium plugin or theme on VIRUS TOTAL.

Any download from that site has always been flagged by VirusTotal

LOL

Download WordPress Themes and plugins, please click the links down below
Supermarket wordpress theme
Boss Pro Theme
Go Portfolio
Woocommerce Advanced Shipping Plugin
Fusion White Lable Branding
betterdocs
Divi Booster
Ninja Forms layout and styles free download