What should I do if my website is hacked?

Discovering your site is hacked is stressful, but acting calmly and quickly limits the damage. Follow these steps.

1. Contact us first. Reach our 24/7 UAE-based team on WhatsApp +971 58 553 6767 or support@dirhamaday.ae. We can scan your account, identify infected files, and advise on the safest recovery path.
2. Change all passwords immediately: control panel, client area, email, FTP, database and WordPress admins. Use new strong, unique passwords.
3. Take the site offline temporarily if it is serving malware or spam, to protect visitors and your reputation.
4. Run a malware scan (Virus Scanner in the panel / our server scanning) to locate malicious files.
5. Restore a clean backup from DirhamVault from before the compromise, if available.
6. Close the hole: update WordPress core, plugins and themes; remove unknown admin users; delete unused plugins. Most hacks exploit outdated software or a weak password.
7. Re-secure: enable two-factor authentication, tighten file permissions, and review who has access.

Do not simply restore a backup and stop; if you don't fix the original weakness (an outdated plugin, a leaked password), you can be reinfected.

We are here around the clock. Get in touch on WhatsApp +971 58 553 6767 or support@dirhamaday.ae and manage your account at my.dirhamaday.ae.