Guides / cPanel

Signs your cPanel website is hacked

Updated 27 August 2026

Hosting in India or abroad does not change the symptoms. If visitors see a spam page, Gmail blocks your mail, or Search Console reports malware, treat the server as compromised.

Typical signs

• Random redirects to gambling or pharmacy sites
• Unknown PHP files in public_html or wp-content/uploads
• New cron jobs or email forwarders you did not create
• CPU spikes and outbound spam from Exim

First steps

Take a backup if the host still allows it. Change WHM/cPanel and FTP passwords. Do not log in from an infected PC. Then have someone scan and remove webshells — see our malware cleanup service.