Dear customer,

We received multiple reports of hacker activity on your account and as a result had to suspend the account. Please read the information sent below as it provides you some options as to resolving this issue.

Your account has been hacked with content known as phishing. To protect users on the Internet and to comply with security, we had to deactivate your account.

Example of phishing page: http://www.selfgrowthacademy. com/mfile/

You will need to review your files and clean the account accordingly by removing ALL malicious files, not just the reported url. Once you have confirmed your files are clean and no longer a threat, please contact us again to have your account reactivated.

Although our servers are secure, there are multiple ways that hackers can gain access to your account:



A vulnerable script or program you have installed


An insecure password you have set (either for the cPanel or an FTP account)


An insecure PHP setting you are using on your account


Insecure file permissions you have set for your files


An insecurity on a computer you use to access your account (a virus or other malware on a home or work computer)


To correct this problem:



Go through the entire account and remove unfamiliar/unused files; repair files that have been modified by the hacker.


Update all scripts/programs/plugins/themes on the account to the latest versions.


Research any scripts/programs/plugins/themes you are using for known security vulnerabilities; remove any with known, unresolved vulnerabilities.


Update your cPanel password, using a strong password (i.e. upper case characters, lower case characters, numbers, symbols).


Remove unused FTP accounts.


Update the passwords on necessary FTP accounts to strong passwords (see above).


Update the passwords for any scripts/programs you are using to strong passwords (see 4 above).


Remove all unknown cron jobs.


Secure the php configuration settings in your php.ini file.


Update the file permissions for files and folders on your account.


Secure your home computer by using an up-to-date anti-virus program; if you already use an anti-virus program, download and try a different anti-virus program, which may scan for different issues.


Due to this very problem, once you've been hacked once it's important, essential even to protect your account from further infection. Some things to do to protect yourself are:



Keep your scripts up to date, like wordpress or Joomla.


Acquire an Internet security service such as http://wewatchyourwebsite.com/ or http://sitelock.com - these companies will scan your site regularly for a fee and if an infection is detected will alert you to the problem and can use automated tools of their own to remove the infection. They will also help you 'harden' your sites from further attacks by closing commonly used exploits that hackers use.


Anything you're not using can be a vulnerability. If you have a wordpress plugin or theme you're not using, delete it rather than disable it. make sure any customizations or premium plugins/themes are saved to your computer in case you want to add them again later. The same concept can be applied to just about any CMS or content on your account.


Keep your site performing well. tools like http://gtmetrix.com/ can be used to examine the performance of your site. Sites that perform poorly use more memory and cause lags or timeouts, which hackers can exploit to gain access to your files/site.


Run your own scans - http://sitecheck.sucuri.net/scanner/ is a great tool to use, though there's plenty of others.\


Information is your friend. The more you're aware of this subject, the better you will be able to protect yourself in the future or deal with an issue of infection. To get you started, you may want to read through this site which has some useful information: http://redleg-redleg.blogspot.com/


Thank you

Terms of Service