Magento Malware Removal & Security Hardening
Budget: ₹600 – ₹1,500 INR
I run my store on Magento 2 and it has recently been infected with malware. I have not attempted any fixes yet, so the installation is still in the exact state the attackers left it. What I need now is a clean, verifiable recovery followed by a solid security upgrade so the problem does not return.
Here is what I expect once we start:
• Full diagnosis of the current Magento 2 code-base, database and server environment, locating every malicious file, script or backdoor.
• Complete removal of the malware without breaking core or custom functionality, with the storefront and admin remaining intact.
• Patch-level check and upgrades for Magento 2 and all extensions, along with any server-side components that could be vectors.
• Hardening measures such as permission tightening, two-factor login, recommended security extensions, WAF / ModSecurity rules, cron and backup configuration, and an audit of admin accounts.
• A concise report detailing what you found, what you removed, and the steps you took to secure the site, plus clear guidance for ongoing best practices.
Acceptance criteria: the site must pass an industry-standard malware scan, load without redirects or pop-ups, and remain clean for a minimum of 30 days after delivery.
I am ready to provide SSH, cPanel or hosting access as soon as we agree on the plan. Let me know your estimated turnaround time and any information you need to get started.
Here is what I expect once we start:
• Full diagnosis of the current Magento 2 code-base, database and server environment, locating every malicious file, script or backdoor.
• Complete removal of the malware without breaking core or custom functionality, with the storefront and admin remaining intact.
• Patch-level check and upgrades for Magento 2 and all extensions, along with any server-side components that could be vectors.
• Hardening measures such as permission tightening, two-factor login, recommended security extensions, WAF / ModSecurity rules, cron and backup configuration, and an audit of admin accounts.
• A concise report detailing what you found, what you removed, and the steps you took to secure the site, plus clear guidance for ongoing best practices.
Acceptance criteria: the site must pass an industry-standard malware scan, load without redirects or pop-ups, and remain clean for a minimum of 30 days after delivery.
I am ready to provide SSH, cPanel or hosting access as soon as we agree on the plan. Let me know your estimated turnaround time and any information you need to get started.