t threatover

// PHARMA HACK · WORDPRESS · CLEANED

Pharma spam on your site?
Gone.

Manual removal of the pharma-hack injection. File, database, and sitemap cleanup. Entry vector identified. Google Safe Browsing reconsideration submitted. Flat $279.

§ 01 — MECHANISM

Cloaked SEO spam, sitting in your files and your database.

The pharma hack is a long-running SEO-spam campaign. The attacker drops a PHP loader on the server and inserts spam content in the wp_posts and wp_options tables. The loader checks who is requesting each page and serves drugstore content only to Googlebot.

Two consequences: your domain's authority is hijacked to rank pharmacy keywords, and your own pages start ranking lower because the spam pages get crawled more often than yours.

// wp_options — autoloaded pharma payload
01 SELECT option_name, LENGTH(option_value) AS sz
02 FROM wp_options
03 WHERE autoload = 'yes'
04 ORDER BY sz DESC LIMIT 20;
05
06 // Unusually large autoloaded rows you don't recognise = inspect.
07 // Pharma payloads often live there, encoded.

§ 02 — WHAT WE REMOVE

Every place the pharma hack hides.

  • [ FILE LOADER ]

    Obfuscated PHP loader, removed by reading the file diff against a clean WordPress install.

  • [ WP_POSTS ]

    Spam posts and drafts injected into the database — purged. Legitimate content untouched.

  • [ WP_OPTIONS ]

    Autoloaded payloads removed. Theme footer injections and feedwordpress-style spam options reviewed and cleaned.

  • [ SITEMAP ]

    Synthetic pharma URLs purged from sitemap.xml. Clean sitemap regenerated and resubmitted to Search Console.

  • [ RECONSIDERATION ]

    Google Safe Browsing reconsideration submitted. Search Console indexation requested for affected URLs.

  • [ VECTOR CLOSED ]

    We identify the plugin or credential that let the attacker in and close that door before signing off.

§ PRICE

Flat $279. One-time. Per site.

[ RESCUE ]

$279

PAUSCHAL · EINMALIG · PRO SEITE

Manuelle Bereinigung, Eintrittsvektor identifiziert, schriftlicher forensischer Bericht. 30-Tage-Reinfektions-Garantie.

Bereinigung starten →

[ SHIELD ]

$29 / mo

PRO SEITE · JEDERZEIT KÜNDBAR

Laufendes Monitoring, Absicherung, eine Bereinigung pro Jahr inklusive.

Schützen lassen →
Auftrag starten

Seite kompromittiert? Auftrag starten.

Sende uns, was du weißt. Wir antworten mit einer Triage und einem Festpreis.

Aufnahme-Formular öffnen →