WordPress Hacking

[RPATS5]

I received an email from google saying my website had been hacked and now it has gone offline and I can't get access to it via the WordPress Admin area. What can I do to sort this out? Do I need to go through another service? 

I have been told to access the FTP server to check the pages, but I don't know how to do this...

Any help gratefully received!

Thanks

Richard

[Nate · Accepted solution]

This article shows how to find the FTP credentials and connect with a popular free application Filezilla (or the credentials will work for other options as well).

https://www.godaddy.com/help/upload-files-with-sftp-8940

(if you can't login with the listed Host Name, try using the IP address)

Here is more information on what to do if hacked.

https://www.godaddy.com/help/my-website-was-hacked-what-should-i-do-19945

Don't save the password in Filezilla (or other applications that store data in plain text).  Make sure you have proper anti-virus, anti-malware, and firewall on your computer and that they are up-to-date and scan regularly.  Change your passwords immediately, and then again after fixing.  That includes your GoDaddy account, inside of WordPress, and your associated email.

https://www.godaddy.com/help/create-strong-passwords-2653

To help prevent this in the future you should install a security plugin.  There are several to choose from that offer paid and free options.  For example...

https://wordpress.org/plugins/sucuri-scanner/