{"id":7255,"date":"2015-02-24T12:37:23","date_gmt":"2015-02-24T10:37:23","guid":{"rendered":"http:\/\/cognitiveseo.com\/blog\/?p=7255"},"modified":"2018-07-10T11:30:11","modified_gmt":"2018-07-10T08:30:11","slug":"defend-against-serp-hijacking-before-you-lose-your-rankings","status":"publish","type":"post","link":"https:\/\/cognitiveseo.com\/blog\/7255\/defend-against-serp-hijacking-before-you-lose-your-rankings\/","title":{"rendered":"Defend against SERP Hijacking before You Lose Your Rankings"},"content":{"rendered":"<p><span style=\"line-height: 1.5em;\">Site hacking poses a constant threat for webmasters and online business owners.\u00a0Whether you&#8217;re just interested about how to deal with hacking, or unfortunately you&#8217;ve received a &#8220;Notice of suspected hacking&#8221; message in Google webmaster tool, in this article I`ll try to give you some tips on how to deal with it and how to even prevent it in the future.\u00a0Even though Google <\/span><a href=\"https:\/\/support.google.com\/websearch\/answer\/190597?hl=en\" target=\"_blank\"><span style=\"line-height: 1.5em;\">does<\/span><\/a><span style=\"line-height: 1.5em;\">\u00a0what it can to stop spam and SERP Hijacking, black hatters still use this shady tactic to rank up various sites. The hacking can basically go two ways: one is inserting links and keywords pointing to a business the hacker wants to rank higher in and the other is inserting malware with the purpose of infecting end users to gain financial information. This article will tackle the first kind of hacking, the one we call, in the online world, <strong>SERP Hijacking<\/strong>.<\/span><\/p>\n<p style=\"text-align: center;\"><img fetchpriority=\"high\" decoding=\"async\" class=\"aligncenter size-full wp-image-7437\" title=\"Hijacked SERP\" src=\"http:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/hijacked-serp.jpg\" alt=\"Hijacked SERP\" width=\"800\" height=\"471\" srcset=\"https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/hijacked-serp.jpg 800w, https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/hijacked-serp-300x176.jpg 300w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/p>\n<p>In this dreaded circumstance, a hacker gains access to your website and inserts keywords and links pointing to his business. Worst of all, these links and keywords are usually hidden form the webmasters and the website looks the same way they\u2019re used to see it day after day. Only after accessing the pages from the SERPs a totally different website will be displayed, the one inserted by the hacker. This leads to huge loses in traffic and can even bring your own website a Google penalty and will give you a lot of work to do in order to recover from the damages. Luckily there are ways to catch the hacking before it does enough damage and even before Google takes note of it and starts throwing penalties left and right.<\/p>\n<p style=\"text-align: center;\"><img decoding=\"async\" class=\"aligncenter wp-image-7317\" title=\"Lost Rankings due to Hacked Site\" src=\"http:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/lost-rankings-due-to-hacked-site.jpg\" alt=\"Lost Rankings due to Hacked Site\" width=\"970\" srcset=\"https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/lost-rankings-due-to-hacked-site.jpg 1013w, https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/lost-rankings-due-to-hacked-site-300x138.jpg 300w\" sizes=\"(max-width: 1013px) 100vw, 1013px\" \/><\/p>\n<p>&nbsp;<\/p>\n<h3><strong>Why Is &#8220;Hacking Sites for Rankings&#8221; Such a Profitable Business?<\/strong><\/h3>\n<p><span style=\"line-height: 1.5em;\">Even though Google wages a constant war on hacking with constant <\/span><a style=\"line-height: 1.5em;\" href=\"http:\/\/cognitiveseo.com\/blog\/5443\/google-panda-4-0-payday-loan-2-0-updates-launched-today\/\" target=\"_blank\">algorithm updates<\/a><span style=\"line-height: 1.5em;\">, hacking for rankings is still used today. And why is it so often used? Unfortunately, because it works. Simply take a look at the Google search results for highly competitive words like: buy Viagra, buy Cialis or payday loans.\u00a0<\/span><\/p>\n<p style=\"text-align: center;\"><img decoding=\"async\" class=\"aligncenter wp-image-7317\" title=\"Hacked Sites SERPs Parasites\" src=\"http:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/hacked-sites-serps-parasites.jpg\" alt=\"Hacked Sites SERPs Parasites\" width=\"829\" height=\"886\" \/><\/p>\n<div>\u00a0<\/div>\n<p>As you can see for yourself, from the first 5 results, 3 of them are hosted illegally on servers that have nothing to do with Cialis. They latch onto high authority and innocent domains to climb the search engine ladder.<\/p>\n<blockquote>\n<p>Due to the illegal nature of this technique, most people began to call these hackers, crap hatters.<span style=\"color: #008000;\"><br \/>\n <\/span><\/p>\n<\/blockquote>\n<p>This kind of hacking is very appealing to <del>black hatters<\/del>\u00a0crap hatters. Clicking the results will redirect users to completely different pages through the help of a cloaking script with clever HTTP_REFERER identification.As stated before, the problem here is that the webmaster will access the hacked site only through the search results page. This could lead to a late detection of the hacking which, in turn, will lead to loss of traffic and potential Google penalties.<\/p>\n<p>Only after a closer inspection of the URL can we\u00a0see that the domains don&#8217;t have anything remotely related to drugs:<\/p>\n<p style=\"text-align: center;\"><img decoding=\"async\" class=\"aligncenter size-full wp-image-7287\" title=\"Candlelighters Hacked\" src=\"http:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/candlelighters-hacked.jpg\" alt=\"Candlelighters Hacked\" width=\"754\" height=\"668\" srcset=\"https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/candlelighters-hacked.jpg 754w, https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/candlelighters-hacked-300x265.jpg 300w\" sizes=\"(max-width: 754px) 100vw, 754px\" \/><\/p>\n<p>This technique is called <strong><a href=\"http:\/\/cognitiveseo.com\/blog\/5442\/4-techniques-to-identify-if-your-site-is-abused-by-parasite-hosting-seo-doorways\/\" target=\"_blank\">Parasite Hosting<\/a>\u00a0<\/strong>and it&#8217;s defined as hosting a webpage on someone&#8217;s server without their consent. The hackers usually target high authority domains that rank really well in Google. The websites point to a certain site that they wish to promote and boost their <a href=\"https:\/\/cognitiveseo.com\/ranktracker\/\"><strong>position in the SERPs<\/strong><\/a>. As the name suggests, these pages are parasites, feeding on the high authority earned by other websites in Google.<\/p>\n<p>&nbsp;<\/p>\n<p>Luckily, Google is working hard to fix this issue. Their latest payday loans\u00a0<strong><a href=\"http:\/\/cognitiveseo.com\/blog\/5443\/google-panda-4-0-payday-loan-2-0-updates-launched-today\/\" target=\"_blank\">update<\/a> <\/strong>took things down a notch, but there is still a big delay between the indexing of the hacked site and the moment Google uncovers the scheme. Hackers who use this technique still reap the benefits of raking in the top 10 of the SERPs as Google just can&#8217;t detect them right away. In the end, they will be uncovered, and penalties will be applied.<\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"line-height: 1.5em;\">You will always find this technique used together with other types of black hat SEO strategies for a better performance. They do have the power to influence rankings on their own, but if one goes through the trouble of hacking a children cancer foundation website, you can be sure other types of black hats techniques are used to promote their business.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p>Another black hat tactic that goes hand in hand with parasite hosting is <strong>Google Bombing<\/strong>. This technique is not at least new as it was first encountered in 1999 when a search for \u201cmore evil than Satan himself\u201d provided in the SERPs the Microsoft homepage as the no. 1 result. A simple definition for Google bombing is heavily linking with the same anchor text, from many domains to the same URL. This will result in increased rankings for the link on the desired keyword. Google bombing quickly evolved from a simple prank to an often used black hat technique to boost rankings for some websites.<\/p>\n<blockquote>\n<div>Google tries to stop Google Bombing\u00a0from working, but black hatters still use it to their advantage these days.<\/div>\n<\/blockquote>\n<p><span style=\"line-height: 1.5em;\">Let&#8217;s take an example and see how it performed together with parasite hosting:<\/span><\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-7422\" title=\"Black Hat Google Bombing Page\" src=\"http:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/black-hat-google-bombing-page-1024x512.jpg\" alt=\"Black Hat Google Bombing Page\" width=\"922\" height=\"461\" srcset=\"https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/black-hat-google-bombing-page-1024x512.jpg 1024w, https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/black-hat-google-bombing-page-1024x512-300x150.jpg 300w\" sizes=\"(max-width: 922px) 100vw, 922px\" \/><\/p>\n<p>As you can see from the screenshot, this URL has zero history, which shows that it&#8217;s a new page, and yet in the last days it has generated huge spikes of new links. This seems abnormal, a more in-depth look at the domain&#8217;s past link gain is required.<\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7423\" title=\"Black Hat Google Bombing Domain\" src=\"http:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/black-hat-google-bombing-domain-1024x512.jpg\" alt=\"Black Hat Google Bombing Domain\" width=\"1024\" height=\"512\" srcset=\"https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/black-hat-google-bombing-domain-1024x512.jpg 1024w, https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/black-hat-google-bombing-domain-1024x512-300x150.jpg 300w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/p>\n<div>\n<p>The website has a strong, constant link building tactics, starting from 2008. The domain build a solid authority making it a perfect target for some black hat\u00a0action. The last 90 days graph on the right raises suspicion since in only a couple of months it gained thousands of links. Let&#8217;s take a look from where the links come from:<\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7424\" title=\"Parasite Hosting\" src=\"http:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/black-hat-google-bombing-doorway-1024x665.jpg\" alt=\"Parasite Hosting\" width=\"1024\" height=\"665\" srcset=\"https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/black-hat-google-bombing-doorway-1024x665.jpg 1024w, https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/black-hat-google-bombing-doorway-1024x665-300x194.jpg 300w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/p>\n<\/div>\n<p>The newly generated links are actually parasite doorways. Doorways to the landing pages of drug stores for Viagra actually. What this kind of action does is two things:<\/p>\n<ul>\n<li>redirect all the organic traffic from your website to the hacker&#8217;s page;<\/li>\n<li>once Google discovers this, it will penalize your website, resulting in more lost traffic, decline in trustworthiness and headaches for your business.<\/li>\n<\/ul>\n<h3><strong><span style=\"line-height: 1.5em;\">Hacked Sites in the SERPs. A Closer Look:<\/span><\/strong><\/h3>\n<p>I gave you some examples for each of the black hats techniques above, but we should take a closer look at what a hacker does to your site. A hacker can gain access to your website either by finding out your login information or by taking advantage of some vulnerability in the widgets or plugins you are using for your website.<\/p>\n<p>Let&#8217;s take the example of Community Partners with Youth:<\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-7324 aligncenter\" title=\"Another Hacked Site Community\" src=\"http:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/another-hacked-site-community.jpg\" alt=\"Another Hacked Site Community\" width=\"811\" height=\"631\" srcset=\"https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/another-hacked-site-community.jpg 811w, https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/another-hacked-site-community-300x233.jpg 300w\" sizes=\"(max-width: 811px) 100vw, 811px\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>We found out above that it appears in the SERPs for the &#8220;buy cialis&#8221; query. Directly access (not through the search engine results page) displays a normal website, nothing too shady at first glance. To see what pages are indexed by Google, we can do a &#8220;site:cpymn.org&#8221; search. Let&#8217;s take a look at the results:<\/p>\n<p style=\"text-align: center;\">\u00a0<img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-7325 aligncenter\" title=\"Another Hacked Site\" src=\"http:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/another-hacked-site.jpg\" alt=\"Another Hacked Site\" width=\"798\" height=\"926\" srcset=\"https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/another-hacked-site.jpg 798w, https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/another-hacked-site-258x300.jpg 258w\" sizes=\"(max-width: 798px) 100vw, 798px\" \/><\/p>\n<p>Using the query is a great way to uncover all indexed pages in Google and uncover for yourself, even before the search engines, any potential hacking. As you can clearly see only on the first page of results, there are 5 hacked pages. If they are removed before the warning from Google, you might not even get penalized. Let&#8217;s take a closer look at the code to see if we can spot the hacked content:<\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-7326 aligncenter\" title=\"Parasite Hosting Injected Links\" src=\"http:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/parasite-hosting-injected-links-1024x486.jpg\" alt=\"Parasite Hosting Injected Links\" width=\"819\" height=\"389\" srcset=\"https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/parasite-hosting-injected-links-1024x486.jpg 1024w, https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/parasite-hosting-injected-links-300x142.jpg 300w, https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/parasite-hosting-injected-links.jpg 1036w\" sizes=\"(max-width: 819px) 100vw, 819px\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>Here we can clearly see the not so hidden &#8220;HiddenDiv&#8221; filled with keywords and links pointing to websites that have nothing to do with the cpymn.org domain.<\/p>\n<p>Hacking is a huge problem but you can deal with it if you catch it early on. Let&#8217;s move on to the prevention part.<\/p>\n<h3><strong>How to Identify If Your Site was Hacked for Ranking Purposes<\/strong><\/h3>\n<p>The <strong>first<\/strong> way to identify the problem is closely related to what I did in the example above. Simply set up a Google Alert for the words &#8220;site:domain.com&#8221;. This way you will be instantly notified by any new content indexed by Google, and if that content looks shady to you,\u00a0you can take the necessary action to remove it as soon as possible, even before Google detects that it is actually a hack.<\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-7328 aligncenter\" title=\"Google Alert\" src=\"http:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/google-alerta-site-domain-com.jpg\" alt=\"Google Alert\" width=\"808\" height=\"560\" srcset=\"https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/google-alerta-site-domain-com.jpg 808w, https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/google-alerta-site-domain-com-300x207.jpg 300w\" sizes=\"(max-width: 808px) 100vw, 808px\" \/><\/p>\n<div>\u00a0<\/div>\n<p>To set up an alert in Google you can access <a href=\"https:\/\/www.google.com\/alerts\" target=\"_blank\">this page<\/a>. In the query insert the &#8220;site:yourdomain.com&#8221; and I recommend to set it for As-it-happens to get instantly notified. You will receive the alerts on your email account and hopefully, you will have enough time to react to them should worst come to worst.<\/p>\n<p>&nbsp;<\/p>\n<p>The <strong>second<\/strong> method to identify the hacking is with the help of Google Webmasters Tools. Inside the tool, you will be able to set up e-mail alerts in case Google detected that you&#8217;ve been hacked.<\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-7329 aligncenter\" title=\"Setup GWT Email Alerts\" src=\"http:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/setup-gwt-email-alerts.jpg\" alt=\"Setup GWT Email Alerts\" width=\"763\" height=\"773\" srcset=\"https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/setup-gwt-email-alerts.jpg 763w, https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/setup-gwt-email-alerts-296x300.jpg 296w\" sizes=\"(max-width: 763px) 100vw, 763px\" \/><\/p>\n<p>Unlike the first method\u00a0in which you notice the hacking before Google, in this one it&#8217;s Google who discovers the hacking for you. It might be a bit later and action against your site could have already been taken, but it&#8217;s still a good way to discover it.<\/p>\n<h3><strong>How to Secure Your Site<\/strong><\/h3>\n<p>But as usual, the best way to protect yourself from hacking is making sure your website is unhackable (or really, really hard to hack). It\u2019s worth to take the extra steps in order not to be an easy target for hackers.<\/p>\n<p>&nbsp;<\/p>\n<h4><span style=\"line-height: 1.5em;\">1. Block WordPress Login<\/span><\/h4>\n<p><span style=\"line-height: 1.5em;\">Start by limiting access to the &#8220;wp-admin&#8221; folder in WordPress. Allow only a selection of IP\u00a0<\/span>addresses<span style=\"line-height: 1.5em;\">\u00a0to the login section of the WordPress\u00a0login and redirect others to a page of your choosing.\u00a0<\/span><\/p>\n<p>This method will block automated scrapers to try brute force attempts at logging into your WordPress Login.<\/p>\n<p>&nbsp;<\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-7331 aligncenter\" title=\"Block WordPress Login\" src=\"http:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/block-wordpress-login.jpg\" alt=\"Block WordPress Login\" width=\"846\" height=\"336\" srcset=\"https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/block-wordpress-login.jpg 846w, https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/block-wordpress-login-300x119.jpg 300w\" sizes=\"(max-width: 846px) 100vw, 846px\" \/><\/p>\n<h3>\u00a0<\/h3>\n<h4><strong>2. Use Only Trusted WordPress Plugins<\/strong><\/h4>\n<p>I can&#8217;t stress enough this point, WordPress plugins have been a target for hackers since they were first introduced. In the summer of last year we witnessed a hacking of more than 50000 of websites, thanks to a WordPress plugin which had major security gaps in its code.<\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-7330 aligncenter\" title=\"50000 Hacked Sites\" src=\"http:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/50000-hacked-sites.jpg\" alt=\"50000 Hacked Sites\" width=\"637\" height=\"510\" srcset=\"https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/50000-hacked-sites.jpg 637w, https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/50000-hacked-sites-300x240.jpg 300w\" sizes=\"(max-width: 637px) 100vw, 637px\" \/><\/p>\n<div>\u00a0<\/div>\n<p>Unfortunately, there is no &#8220;trusted plugins only&#8221; tab in the plugin section for WordPress, but before installing any plugin to your website take some time to research it, its developers and see what other people think of it. This 30-minute research may save you a lot more hours in the future if you have to recover from a hacking.<\/p>\n<h3>\u00a0<\/h3>\n<h4><strong>3. Have a Backup Plan<\/strong><\/h4>\n<p>There is great stress in having an online business and knowing that it could be hacked at any moment. A great treatment for this stress comes in the form of having daily backups for your website. You surely don&#8217;t want to wake up in the morning and by the time you take your first sip of coffee notice that your life&#8217;s work is off the grid.\u00a0Such a waste of a good coffee.<\/p>\n<p>Luckily there are many ways of backing it up. And the backups can be done <a href=\"http:\/\/lifehacker.com\/5885392\/automatically-back-up-your-web-site-every-night\" target=\"_blank\">automatically<\/a>.<\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-7332 aligncenter\" title=\"Automatically Backup Your Site Every Night\" src=\"http:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/automatically-backup-your-site-every-night.jpg\" alt=\"Automatically Backup Your Site Every Night\" width=\"700\" height=\"511\" srcset=\"https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/automatically-backup-your-site-every-night.jpg 700w, https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/automatically-backup-your-site-every-night-300x219.jpg 300w\" sizes=\"(max-width: 700px) 100vw, 700px\" \/><\/p>\n<p>These few lines of code can give you the good night sleep you deserve. It only takes a couple of minutes to insert them into your server and you&#8217;ve covered the worse case scenario.<\/p>\n<h3>\u00a0<\/h3>\n<h4><strong><span style=\"line-height: 1.5em;\">4. Use a Website Firewall<\/span><\/strong><\/h4>\n<p>A great tool to add additional protection to your website is provided by the <a href=\"https:\/\/sucuri.net\/website-firewall\/signup\" target=\"_blank\" rel=\"nofollow\">Sucuri <\/a>team. This is one of the extra steps earlier. Not only that it gives extra protection against hacking attempts, it also provides defense against DDOS attacks. And as a plus, it offers Load Balancing and High Availability for your websites.<\/p>\n<p>Setting up the Sucuri solution for WordPress is easy. All you have to do is install the plugin from the CMS Dashboard, activate it and configure it to your choosing. They even provide a quick guide for it <a href=\"https:\/\/sucuri.net\/wordpress-security-plugin-installation\" target=\"_blank\" rel=\"nofollow\">here<\/a>.<\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-7333 aligncenter\" title=\"Sucuri cognitiveSeo\" src=\"http:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/sucuri-cognitiveseo-1024x598.jpg\" alt=\"Sucuri cognitiveSeo\" width=\"819\" height=\"478\" srcset=\"https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/sucuri-cognitiveseo-1024x598.jpg 1024w, https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/sucuri-cognitiveseo-300x175.jpg 300w, https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/sucuri-cognitiveseo.jpg 1190w\" sizes=\"(max-width: 819px) 100vw, 819px\" \/><\/p>\n<div>\u00a0<\/div>\n<h2><span style=\"line-height: 1.5em;\">\u00a0<\/span><\/h2>\n<h3><strong>How does Google Tackle the Hacking Problem<\/strong><\/h3>\n<div><span style=\"line-height: 1.5em;\">Above you have the extra steps that you\u00a0<\/span><span style=\"line-height: 1.5em;\">can take to prevent hacking.\u00a0<\/span><span style=\"line-height: 1.5em;\">Google provides its own security tools to help out webmasters:<\/span><\/div>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-7334 aligncenter\" title=\"Safe Browsing cognitiveSeo\" src=\"http:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/safe-browsing-cognitive.jpg\" alt=\"Safe Browsing cognitiveSeo\" width=\"682\" height=\"486\" srcset=\"https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/safe-browsing-cognitive.jpg 948w, https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/safe-browsing-cognitive-300x213.jpg 300w\" sizes=\"(max-width: 682px) 100vw, 682px\" \/><\/p>\n<div>\u00a0<\/div>\n<p>The Google service diagnoses your website for any malicious software. The Safe Browsing tool enables apps to verify URLs against Google&#8217;s constantly updated lists of suspected phishing and malware pages. Using this service, users will be notified before clicking on links that they will lead to malicious pages. It even prevents hackers to post the links to known phishing pages from your website.<\/p>\n<h2>\u00a0<\/h2>\n<h3><strong>How to Recover a Hacked Site<\/strong><\/h3>\n<p><span style=\"line-height: 1.5em;\">No matter how quickly a webmaster fixes the security issues, recovering from the penalties and hacking takes a while. Google is trying to make the recovery process easier for webmasters with the help of features like <\/span><a style=\"line-height: 1.5em;\" href=\"https:\/\/www.google.com\/webmasters\/tools\/security-issues\" target=\"_blank\">Security Issues<\/a><span style=\"line-height: 1.5em;\">, and a special section on the <\/span><a style=\"line-height: 1.5em;\" href=\"https:\/\/productforums.google.com\/forum\/#!categories\/webmasters\/malware--hacked-sites\" target=\"_blank\">forums <\/a><span style=\"line-height: 1.5em;\">designated for hacked sites. They shared two interesting recovery stories in their <\/span><a style=\"line-height: 1.5em;\" href=\"http:\/\/googlewebmastercentral.blogspot.ro\/2015\/02\/case-studies-fixing-hacked-sites.html?utm_content=buffer8dc3c&amp;utm_medium=social&amp;utm_source=twitter.com&amp;utm_campaign=buffer&amp;m=1\" target=\"_blank\">latest blog post<\/a><span style=\"line-height: 1.5em;\">.<\/span><\/p>\n<p style=\"text-align: center;\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7435\" title=\"Fixing Hacked Sites Google - Case Studies\" src=\"http:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/fixing-hacked-sites-google-case-studies.jpg\" alt=\"Fixing Hacked Sites Google - Case Studies\" width=\"960\" height=\"683\" srcset=\"https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/fixing-hacked-sites-google-case-studies.jpg 960w, https:\/\/cognitiveseo.com\/blog\/wp-content\/uploads\/2015\/02\/fixing-hacked-sites-google-case-studies-300x213.jpg 300w\" sizes=\"(max-width: 960px) 100vw, 960px\" \/><\/p>\n<p>The first case was a WordPress user who received a notification in Google Webmasters Tools regarding their website being labeled as hacked. The webmaster found his code filled with &#8220;buy viagra&#8221; and &#8220;buy cialis&#8221; keywords&#8221;. Following the cleanup the webmaster had made, Google still warned him that there were still hacked scrips hidden inside the .htaccess file. Only after fixing that issue did Google remove the hacked site label.<\/p>\n<p>&nbsp;<\/p>\n<p>The following are the steps the webmaster takes in order to keep his website clean:<\/p>\n<ul>\n<li>Keep the CMS updated to its latest version. The same goes for the plugins;<\/li>\n<li>Secure and strong password for the admin account;<\/li>\n<li><a href=\"http:\/\/en.support.wordpress.com\/security\/two-step-authentication\/\" target=\"_blank\">Two Step Verification<\/a> for login (if it&#8217;s available);<\/li>\n<li>Install only verified and high reputation plugins.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p>The second case presented in the Google&#8217;s blog post is one in which a business owner had a hacker plant some pages on his domain. Hidden from GoogleBot the pages were untraceable using the &#8220;fetch as Googlebot&#8221; feature in WordPress. The webmaster finally fixed his issues and after a couple of reconsideration requests, Google removed the hacked label. Here are the following steps the webmaster takes in order to avoid being hacked:<\/p>\n<ul>\n<li>Use SFTP when transferring files;<\/li>\n<li>Secure access to the .htaccess file;<\/li>\n<li>Be vigilant and look for new and unfamiliar users in the admin panel or any place where users can modify the website.<\/li>\n<\/ul>\n<h3><strong>Consequences of a Hacked Site<\/strong><\/h3>\n<p>The aftermath of a hacked site is always hard to deal with. But it&#8217;s not impossible to recover from it. Let&#8217;s take <a href=\"http:\/\/www.webmasterworld.com\/google\/4700849.htm\" target=\"_blank\">this<\/a> example from a forum member of WebmasterWorld.<\/p>\n<p>&nbsp;<\/p>\n<p>In his case, just like many others, the hacking came from a pharma network and started inserting viagra\/cialis pages on the user&#8217;s\u00a0server. Hackers hid the pages from users, making them visible only for the search engine bots. They could have used a form of hacking like I have explained above in the article. The website was originally a WordPress site and the hackers managed to move it to Drupal and stopped inserting additional sites to the server after the migration.<\/p>\n<p>&nbsp;<\/p>\n<p>The webmaster did not notice the hacking before Google did and it was hit by two Google penalties. One was received for the hacked pages, and one for unnatural links. Only after the Google penalties were sent the webmaster took action to remove the links from the webpage, disavow the unnatural hacked links using the disavow tool and send the first reconsideration request to begin the recovery process. As you can see from his report, Google did remove his unnatural link penalty. It was only after the second reconsideration request Google removed his hacked pages penalty.<\/p>\n<p>&nbsp;<\/p>\n<p>We can draw some conclusions from the mishaps of this webmaster. Google understands that the unnatural backlinks pointing to your website are actually for the hacked pages. Even though it penalizes for both unnatural link profile and the hacked content, Google is willing to remove the penalties after you have taken action to correctly remove the problems on your website.<\/p>\n<p><span style=\"line-height: 1.5em;\">\u00a0<\/span><\/p>\n<h3><strong>Conclusion<\/strong><\/h3>\n<p>Going through a hacking problem is one of the most stressful and complex issues a webmaster will ever go through. Even if your business doesn&#8217;t rely too much on organic traffic, the penalties received from Google and having a note on your website that says &#8220;This site may contain malicious software&#8221; will ultimately bring heavy losses. I don&#8217;t want to sound too pessimistic about it, but hacking is a constant threat to online businesses. It&#8217;s best if webmasters spend a couple of hours to make sure the website is as secure as possible then spend weeks or even months to recover from hacking.<\/p>\n<p>&nbsp;<\/p>\n<p>It&#8217;s encouraging to see that Google helps a lot in this matter, with the constant updates made to the algorithm, they will catch the hacks faster. Also, using the security tools available will make your website more secure and most of all you will have a backup plan to fall onto if worst comes to worst.<\/p>\n<p>So what other ways or tools do you use for extra defense against hackers?<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Site hacking poses a constant threat for webmasters and online business owners.\u00a0Whether you&#8217;re just interested about how to deal with hacking, or unfortunately you&#8217;ve received a &#8220;Notice of suspected hacking&#8221; message in Google webmaster tool, in this article I`ll try to give you some tips on how to deal with it and how to even [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[24,6],"tags":[],"class_list":["post-7255","post","type-post","status-publish","format-standard","hentry","category-case-studies","category-seo"],"_links":{"self":[{"href":"https:\/\/cognitiveseo.com\/blog\/wp-json\/wp\/v2\/posts\/7255","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cognitiveseo.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cognitiveseo.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cognitiveseo.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cognitiveseo.com\/blog\/wp-json\/wp\/v2\/comments?post=7255"}],"version-history":[{"count":0,"href":"https:\/\/cognitiveseo.com\/blog\/wp-json\/wp\/v2\/posts\/7255\/revisions"}],"wp:attachment":[{"href":"https:\/\/cognitiveseo.com\/blog\/wp-json\/wp\/v2\/media?parent=7255"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cognitiveseo.com\/blog\/wp-json\/wp\/v2\/categories?post=7255"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cognitiveseo.com\/blog\/wp-json\/wp\/v2\/tags?post=7255"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}