Recovering a hacked WooCommerce store
An online shop flagged as “dangerous” by browsers, with malware injected into its pages — cleaned up, secured and reopened.
Anonymised, illustrative example — not a named client, and with no invented metrics.
The problem
The owner found their WooCommerce store throwing browser security warnings and redirecting some visitors to spam sites. Sales had stopped overnight and they didn't know what was safe to touch.
The approach
I took a full backup, identified the injected malware and the outdated plugin that let it in, removed the malicious code, and rotated all credentials. Then I patched the entry point, added security headers and file-permission hardening, and submitted the site for review to clear the blacklist.
The outcome
The store was cleaned, the vulnerability closed, and the browser warnings removed once the blacklist review cleared. The owner got a plain-english summary of what happened and a short checklist to reduce the chance of it recurring.
A composite example of the kind of security recovery work I do. The specifics are generalised — every real cleanup is different — but the calm, methodical approach is the same: contain it, understand it, fix the actual hole, and leave the owner informed.