WordPress Onetone theme is abused

In our previous Blog post, we talked about how WooCommerce websites were abused by a leak.Now earlier this week it was revealed that WordPress websites running the Onetone-Theme were targeted for attacks.

This has to do with the fact that this theme is no longer updated by the developers.As a result, the theme has therefore also been removed from the WordPress.

In this attack, it was possible for the attacker to install a backdoor around the website.From here they could retrieve the administrator account data and then take over the site.

Help I use the Onetone theme

It could be that you are using this theme on your hosting and you do not know exactly what to do.First of all, we recommend that you completely disable and remove this theme.

When you have done this, it is best to check your user accounts and if there is anything suspicious in there, you should delete it.Then of course you need to change the password of the administrator account, this can be done in your database.

After this you should save the files of your website locally, just to be sure.You should then check them with a malware scanner and if there is no more malware on it you can use it again.

Other security tips

There are of course other things you can do to ensure that you keep your WordPress site extra secure.For example, it is always advisable to keep everything as up to date as possible.

Many of these updates are security updates that make your website less susceptible to these kinds of attacks. Managed WordPress hosting is highly recommended for this; everything is updated automatically.

We also recommend that you make a good backup of your website at all times.If it goes wrong again you will always have the possibility to restore it within seconds.

Alternatives for Onetone-theme

Because it is of course annoying for you if you use this theme it is also good to look at some alternatives.One theme that is well reviewed is the theme called Shapely.

This is a theme that uses only one page on your entire website.Fortunately, you do have a lot of choice to set this up completely according to your own wishes and create a beautiful website from it.

Should you have any further questions about this article, you can always check whether a chat employee is available.If there is no one on the chat, you can always create a ticket to our helpdesk.