t threatover

// PHARMA HACK · WORDPRESS · CLEANED

Pharma spam on your site?
Gone.

Manual removal of the pharma-hack injection. File, database, and sitemap cleanup. Entry vector identified. Google Safe Browsing reconsideration submitted. Flat $279.

§ 01 — MECHANISM

Cloaked SEO spam, sitting in your files and your database.

The pharma hack is a long-running SEO-spam campaign. The attacker drops a PHP loader on the server and inserts spam content in the wp_posts and wp_options tables. The loader checks who is requesting each page and serves drugstore content only to Googlebot.

Two consequences: your domain's authority is hijacked to rank pharmacy keywords, and your own pages start ranking lower because the spam pages get crawled more often than yours.

// wp_options — autoloaded pharma payload
01 SELECT option_name, LENGTH(option_value) AS sz
02 FROM wp_options
03 WHERE autoload = 'yes'
04 ORDER BY sz DESC LIMIT 20;
05
06 // Unusually large autoloaded rows you don't recognise = inspect.
07 // Pharma payloads often live there, encoded.

§ 02 — WHAT WE REMOVE

Every place the pharma hack hides.

  • [ FILE LOADER ]

    Obfuscated PHP loader, removed by reading the file diff against a clean WordPress install.

  • [ WP_POSTS ]

    Spam posts and drafts injected into the database — purged. Legitimate content untouched.

  • [ WP_OPTIONS ]

    Autoloaded payloads removed. Theme footer injections and feedwordpress-style spam options reviewed and cleaned.

  • [ SITEMAP ]

    Synthetic pharma URLs purged from sitemap.xml. Clean sitemap regenerated and resubmitted to Search Console.

  • [ RECONSIDERATION ]

    Google Safe Browsing reconsideration submitted. Search Console indexation requested for affected URLs.

  • [ VECTOR CLOSED ]

    We identify the plugin or credential that let the attacker in and close that door before signing off.

§ PRICE

Flat $279. One-time. Per site.

[ RESCUE ]

$279

PLANO · ÚNICO · POR SITIO

Limpieza manual, identificación del vector, informe forense escrito. Garantía de reinfección 30 días.

Iniciar limpieza →

[ SHIELD ]

$29 / mo

POR SITIO · CANCELA CUANDO QUIERAS

Monitorización continua, endurecimiento, una limpieza al año incluida.

Protégete →

¿Sitio comprometido? Abre un encargo.

Send us what you know. You get a triage and a fixed quote in return — no obligation.

Abrir formulario →