● Site hacked right now? Start a repair →Hablamos español →contact@backstopweb.com
backstop/web
ResultsReal cases, names removed

Hacked sites we put back together.

What we found, what we fixed, and how it ended. Work by Melvin Monterroza.

Read the cases My site is hacked
50+hacked sites recovered
25sites in one attack, all cleaned
130+spam posts off one site
7+backdoors on one site
Case filesNames removed to protect clients

Six cases from this year.

Case 01 · May 2026resolved

Law firm network

25sites
Found
Casino spam on every site, from the same attacker. Spam hidden from the WordPress admin.
Fixed
Every site cleaned, files and database. Google sitemaps cleaned. Sites locked down.
Result
All 25 clean
Case 02 · Aug 2026resolved

Law firm network

14of 64 sites
Found
Gambling spam hidden from sitemaps and admin tools, but still in Google.
Fixed
Found with a scan across all 64 sites. Spam removed, sitemaps cleaned.
Result
All 14 clean
Case 03 · Aug 2026resolved

Law firm

8backdoors
Found
Backdoors named like WordPress core files. A second one inside a fake copy of a security plugin. A firewall bypass in the server config.
Fixed
All removed, 130+ spam posts deleted, passwords changed, Google cleanup done.
Result
Deep scan clean
Case 04 · Sep 2026resolved

Law firm network

4sites
Found
A backdoor hidden inside the main file of a real email plugin. It survived the host's own cleanup.
Fixed
Backdoor removed. Fixed the email and the site the host's cleanup had broken.
Result
Email working again
Case 05 · Sep 2026resolved

Payment page

23fake charges
Found
Bots testing stolen cards on a public payment link, $10 at a time. 4 went through.
Fixed
Found the source the same day: a payment link in the menu. Not a WordPress hack.
Result
Source closed
Case 06 · 2026resolved

Law firm

3attacks
Found
Same site hit three times. Fake admin users, a hidden loader, malware in the theme.
Fixed
Each layer removed and checked byte by byte. Entry points closed.
Result
Cleaned and verified
Patterns

What we find most often.

Hidden spam pages

Casino posts Google sees and you don't.

Fake core files

Backdoors named to look like WordPress.

Infected real plugins

Malware inside a plugin you trust.

Fake admin users

Accounts that let them back in.

Firewall bypass

Server rules changed to let them through.

Old plugins

How they get in, almost every time.

A care plan closes most of these before they start. Most were law firm sites.

GuidesFree, plain English

Read more on this.

Lawyer working at a laptop beside a Lady Justice statueSecurity

How We Removed Casino Spam From 25 WordPress Law Firm Sites

Read the guide →

All guides

Seeing any of this on your site?

Full refund if we cannot clean it. 30-day warranty.

Start a repair Free site check

or email contact@backstopweb.com