{"id":8805,"date":"2026-05-29T15:35:07","date_gmt":"2026-05-29T13:35:07","guid":{"rendered":"https:\/\/mybox.com\/help\/?post_type=manual_kb&#038;p=8805"},"modified":"2026-06-09T07:15:03","modified_gmt":"2026-06-09T05:15:03","slug":"how-website-infections-happen","status":"publish","type":"manual_kb","link":"https:\/\/mybox.com\/help\/en\/knowledgebase\/how-website-infections-happen\/","title":{"rendered":"How Do Websites Get Infected?"},"content":{"rendered":"\n<div class=\"translation-block translation-block-merged\">\n<p class=\"wp-block-paragraph\">Website infections are one of the most common security incidents affecting websites today. Whether you run a personal blog, a company website, or an online store, understanding how infections occur is essential for protecting your data, your visitors, and your reputation.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Most website compromises are not the result of targeted attacks but rather automated bots scanning the internet for known vulnerabilities.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_86 ez-toc-wrap-left counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/how-website-infections-happen\/#Common_Causes_of_Website_Infections\" >Common Causes of Website Infections<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/how-website-infections-happen\/#Exploiting_Software_Vulnerabilities\" >Exploiting Software Vulnerabilities<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/how-website-infections-happen\/#Weak_Passwords_and_Credential_Theft\" >Weak Passwords and Credential Theft<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/how-website-infections-happen\/#Malicious_Plugins_and_Themes\" >Malicious Plugins and Themes<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/how-website-infections-happen\/#Server-Side_Vulnerabilities\" >Server-Side Vulnerabilities<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/how-website-infections-happen\/#Phishing_and_Social_Engineering\" >Phishing and Social Engineering<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/how-website-infections-happen\/#How_to_Protect_Your_Website\" >How to Protect Your Website<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/how-website-infections-happen\/#Keep_Software_Updated\" >Keep Software Updated<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/how-website-infections-happen\/#Use_Strong_Passwords\" >Use Strong Passwords<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/how-website-infections-happen\/#Enable_Two-Factor_Authentication\" >Enable Two-Factor Authentication<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/how-website-infections-happen\/#Install_Security_Tools\" >Install Security Tools<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/how-website-infections-happen\/#Limit_User_Access\" >Limit User Access<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/how-website-infections-happen\/#Perform_Regular_Backups\" >Perform Regular Backups<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/how-website-infections-happen\/#Use_SSL_Encryption\" >Use SSL Encryption<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/how-website-infections-happen\/#Summary\" >Summary<\/a><\/li><\/ul><\/nav><\/div>\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Common_Causes_of_Website_Infections\"><\/span>Common Causes of Website Infections<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<\/div>\n\n<div id=\"mybox-1408484464\" class=\"mybox-content mybox-entity-placement\"><div class=\"early-access-banner-inpost\">\r\n  <div class=\"banner-left-inpost\">\r\n    <div class=\"icon-box-inpost\">\r\n      <img decoding=\"async\" src=\"https:\/\/mybox.com\/help\/wp-content\/uploads\/2026\/02\/square-info-icon.svg\" alt=\"Info\">\r\n    <\/div>\r\n    <div class=\"text-box-inpost\">\r\n      <span class=\"label-inpost\"><span class=\"translation-block translation-block-banner-text\">Early access<\/span><\/span>\r\n      <h4><span class=\"translation-block translation-block-banner-text\">Still need help?<\/span><\/h4>\r\n      <p><span class=\"translation-block translation-block-banner-text\">Contact our customer service team.<\/span><\/p>\r\n    <\/div>\r\n  <\/div>\r\n\r\n  <div class=\"banner-right-inpost\">\r\n    <a href=\"https:\/\/panel.mybox.com\/helpdesk2\/v\/list\/\" class=\"banner-button-inpost\"><span class=\"translation-block translation-block-banner-text\">Message us<\/span><\/a>\r\n  <\/div>\r\n<\/div><\/div>\n\n<div class=\"translation-block translation-block-merged\"><p class=\"wp-block-paragraph\">Websites can become infected through various attack vectors. In most cases, attackers exploit weaknesses in website software, server configurations, or user accounts to gain unauthorized access.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Once access is obtained, attackers may:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Inject malicious code<\/li>\n\n\n\n<li>Redirect visitors to harmful websites<\/li>\n\n\n\n<li>Distribute malware<\/li>\n\n\n\n<li>Steal customer information<\/li>\n\n\n\n<li>Send spam emails<\/li>\n\n\n\n<li>Use the website for further attacks<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Exploiting_Software_Vulnerabilities\"><\/span>Exploiting Software Vulnerabilities<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">One of the most common causes of website infections is outdated software.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Attackers actively search for websites running vulnerable versions of:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Content Management Systems (CMS)<\/li>\n\n\n\n<li>Plugins and extensions<\/li>\n\n\n\n<li>Themes and templates<\/li>\n\n\n\n<li>Server software<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Popular platforms such as WordPress, Joomla, and PrestaShop are frequently targeted because of their widespread use.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When security vulnerabilities become publicly known, automated bots begin scanning websites looking for installations that have not yet been updated.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Weak_Passwords_and_Credential_Theft\"><\/span>Weak Passwords and Credential Theft<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Poor password practices remain a major security risk.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Examples of weak credentials include:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>admin \/ admin<\/li>\n\n\n\n<li>password123<\/li>\n\n\n\n<li>companyname2025<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Attackers often use automated brute-force attacks that attempt thousands of username and password combinations until access is gained.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Once logged in, attackers can:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Upload malicious files<\/li>\n\n\n\n<li>Modify website content<\/li>\n\n\n\n<li>Create hidden administrator accounts<\/li>\n\n\n\n<li>Install backdoors for future access<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Malicious_Plugins_and_Themes\"><\/span>Malicious Plugins and Themes<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Installing software from untrusted sources can expose a website to serious security risks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Some pirated or unofficial plugins and themes may contain:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Hidden backdoors<\/li>\n\n\n\n<li>Malware<\/li>\n\n\n\n<li>Spam scripts<\/li>\n\n\n\n<li>Remote access tools<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Even legitimate plugins can become dangerous if they are abandoned and no longer receive security updates.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Always download extensions from trusted developers and official marketplaces whenever possible.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Server-Side_Vulnerabilities\"><\/span>Server-Side Vulnerabilities<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Website security also depends on the hosting environment.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Potential server-related risks include:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Outdated PHP versions<\/li>\n\n\n\n<li>Improper file permissions<\/li>\n\n\n\n<li>Unpatched operating systems<\/li>\n\n\n\n<li>Misconfigured services<\/li>\n\n\n\n<li>Insecure FTP accounts<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">A vulnerable server can allow attackers to compromise multiple websites hosted on the same environment.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Phishing_and_Social_Engineering\"><\/span>Phishing and Social Engineering<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Not all attacks rely on technical vulnerabilities.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Phishing attacks attempt to trick website owners into revealing:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Login credentials<\/li>\n\n\n\n<li>Hosting account passwords<\/li>\n\n\n\n<li>Email account access<\/li>\n\n\n\n<li>Two-factor authentication codes<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Attackers often send convincing emails pretending to be:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Hosting providers<\/li>\n\n\n\n<li>Domain registrars<\/li>\n\n\n\n<li>Payment processors<\/li>\n\n\n\n<li>Popular software vendors<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Once credentials are stolen, attackers can log in and compromise the website directly.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"How_to_Protect_Your_Website\"><\/span>How to Protect Your Website<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Keep_Software_Updated\"><\/span>Keep Software Updated<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Regularly update:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>CMS software<\/li>\n\n\n\n<li>Plugins<\/li>\n\n\n\n<li>Themes<\/li>\n\n\n\n<li>Server applications<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Security updates often fix vulnerabilities that are actively being exploited.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Use_Strong_Passwords\"><\/span>Use Strong Passwords<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Create unique passwords for:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Website administrators<\/li>\n\n\n\n<li>Hosting accounts<\/li>\n\n\n\n<li>Databases<\/li>\n\n\n\n<li>FTP and SSH accounts<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Consider using a password manager to generate and store secure passwords.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Enable_Two-Factor_Authentication\"><\/span>Enable Two-Factor Authentication<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Two-factor authentication adds an additional layer of security beyond passwords and can significantly reduce the risk of account compromise.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Install_Security_Tools\"><\/span>Install Security Tools<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Security solutions can help detect and block malicious activity.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Examples include:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Firewalls<\/li>\n\n\n\n<li>Malware scanners<\/li>\n\n\n\n<li>Login protection tools<\/li>\n\n\n\n<li>File integrity monitoring systems<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Limit_User_Access\"><\/span>Limit User Access<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Only provide administrator privileges to users who truly require them.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Review user accounts regularly and remove inactive accounts.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Perform_Regular_Backups\"><\/span>Perform Regular Backups<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Maintain automatic backups of:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Website files<\/li>\n\n\n\n<li>Databases<\/li>\n\n\n\n<li>Configuration files<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Store backups in a separate location from the website itself.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Use_SSL_Encryption\"><\/span>Use SSL Encryption<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">An SSL certificate protects data transmitted between visitors and your website and helps prevent interception of sensitive information.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Summary\"><\/span>Summary<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Website infections typically occur because attackers exploit vulnerabilities in software, weak passwords, insecure hosting environments, or compromised user accounts. Once access is gained, malicious actors can inject malware, steal information, redirect visitors, or use the website for further attacks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The best defense is a proactive security strategy that includes regular updates, strong authentication, trusted software sources, website monitoring, and reliable backups. By implementing these practices, you can significantly reduce the risk of your website becoming compromised.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n<\/div>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"template":"","format":"standard","manualknowledgebasecat":[10],"manual_kb_tag":[914,1605,3344,6258,6621,6622,6623,6624,6625,6626],"class_list":["post-8805","manual_kb","type-manual_kb","status-publish","format-standard","hentry","manualknowledgebasecat-safety","manual_kb_tag-website-security","manual_kb_tag-malware-removal","manual_kb_tag-infected-website","manual_kb_tag-content-management-systems","manual_kb_tag-website-infections","manual_kb_tag-web-malware","manual_kb_tag-website-compromise","manual_kb_tag-website-vulnerabilities","manual_kb_tag-software-vulnerabilities","manual_kb_tag-outdated-software"],"_links":{"self":[{"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/manual_kb\/8805","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/manual_kb"}],"about":[{"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/types\/manual_kb"}],"author":[{"embeddable":true,"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/users\/1"}],"version-history":[{"count":3,"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/manual_kb\/8805\/revisions"}],"predecessor-version":[{"id":8806,"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/manual_kb\/8805\/revisions\/8806"}],"wp:attachment":[{"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/media?parent=8805"}],"wp:term":[{"taxonomy":"manualknowledgebasecat","embeddable":true,"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/manualknowledgebasecat?post=8805"},{"taxonomy":"manual_kb_tag","embeddable":true,"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/manual_kb_tag?post=8805"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}