The short answer
Gambling redirects, a Google warning or strange pages in search results are the common signs.
Change every password and find your last clean backup — but don’t delete everything.
A proper clean-up closes the hole they used, or the site gets re-hacked within weeks.
Signs your site has been hacked
Not every hack is obvious. These are the ones Malaysian businesses report most.
Redirects to gambling or scam sites
Visitors — often only on mobile, or only from Google — land on online judi, betting or fake prize pages.
“This site may be hacked” in Google
The warning appears under your listing and clicks drop sharply.
Strange pages in search results
Thousands of Japanese, Chinese or pharmacy pages under your domain that you never created.
Hosting suspended or email bouncing
Your host blocks the account for sending spam, or your emails start landing in junk.
The first hour
What to do — and not do — before anyone starts cleaning.
Don’t delete everything
Wiping the site can destroy the evidence of how they got in, and the clean content you need to keep.
Change every password
Hosting, WordPress admin, FTP, database and the email linked to them. Remove admin users you do not recognise.
Tell your host
They can often confirm the infection, provide server logs and restore a backup from before it started.
Find your last clean backup
Note the date. Restoring alone is not enough — the hole they used is still open.
How a clean-up works
The order matters. Skipping steps is why sites get re-hacked a week later.
Scan and remove malware
Infected files, injected code in the database, hidden admin accounts and backdoors.
Close the hole
Usually an outdated plugin or theme, a nulled (pirated) plugin, or a weak password. Update or replace it.
Clear the Google warning
Remove the spam pages, then request a review in Google Search Console. Reviews usually take a few days.
Harden and monitor
Firewall, limited login attempts, two-factor login, daily off-site backups and malware scans from now on.
Quick answers.
01Why do Malaysian sites get gambling redirect hacks?
Online gambling spammers target sites with outdated plugins to borrow their Google ranking. Small business sites with no updates are easy targets.
02Will restoring a backup fix it?
Only temporarily if the vulnerability is still there. The hole has to be found and closed, or the site will be re-infected.
03How long until Google removes the warning?
After the clean-up and a review request in Search Console, usually a few days.
04What does CST charge?
Speed & security recovery is RM 1,200 fixed — malware removed, Google warning cleared, speed fixed and the site locked down, usually within a week.
“We had been hacked before. Since the redesign, security and care plan started, clean scans every month.”