WordPress Spam Posts With a Fake CAPTCHA That Loads From Ethereum
263 spam posts published with a stolen admin password, 147 hiding a fake CAPTCHA that pulls its payload from an Ethereum contract. Full dissection and read-only checks.
Read ArticleWhat we do
Cleanup when something goes wrong, investigation when you need to know what happened, hardening and monitoring so it does not happen again.
Malware Removal & Cleanup
Hacked, redirecting or blacklisted site. Manual cleanup of files and database, with a written report.
€220 · excl. VATWhy Does My Site Keep Getting Hacked?
Cleaned elsewhere and reinfected. We find what the cleanup missed, in cron, database, server, accounts, credentials, and close the door. Cleanup included.
from €590 · excl. VATIncident Investigation & Technical Report
What happened, since when, from where. Timeline, indicators, cleanup and a report for management or your host.
from €790 · excl. VATSecurity Hardening & Verification
A defined list of measures, applied and verified one by one, with a verification report.
€300 · excl. VATMaintenance & Security Monitoring
Weekly checks, updates with backup, monthly report and cleanup included. Three plans, no minimum term.
from €35 / month · excl. VATServer Security & Remediation
Malware across accounts, unknown processes, spam from your IP. Cleanup, hardening and server antivirus. cPanel, Plesk, DirectAdmin.
from €390 · excl. VAT
How we work
Evidence first, then cleanup, always a report
The same order on every job, whether it is a small WordPress site or a server with dozens of accounts. At every step you know what is happening to your site, and nothing is deleted without a copy.
- Full backup of files and database before anything changes
- Manual review of core, plugins, uploads, must-use plugins, database, cron and server
- Every obfuscated payload decoded, not just deleted
- Verification from inside and from outside the server
Tell us what you see
Through the contact form, with the site address. We reply by email.
Price confirmed in writing
Fixed where the list says fixed. "From" prices become an exact figure before we start.
Cleanup and verification
Manual work on files, database and server. Second pass and external check.
Written report
What was found, where, what was removed, and what is left for you to decide.
Maintenance & security monitoring
Someone who checks your site every week
Three monthly plans per site: Monitoring from €35, Protection €75 with updates and one cleanup a year, Response €150 with unlimited cleanups and a 4 business hour response. No minimum term. Prices exclude VAT 24%.
Included in every plan
- Weekly malware and integrity check by a person
- Uptime and blacklist monitoring with alerts
- Vulnerability watch for your components
- Monthly report on what was checked and what needs attention
Latest research
Technical write-ups from real incidents, without client names.
November 9, 2026
November 8, 2026
Dissecting WordPress 7.1.4: The Core Updater Race (CVE-2026-119977) in Our Lab
We diffed WordPress 7.1.3 vs 7.1.4 line by line and timed the exploited updater race (CVE-2026-119977) in a lab. Why the fix runs on old code, and how to block it.
Read Article
November 7, 2026
A Stolen WordPress Admin, a Web Terminal and a Loader Hidden in a Real Plugin
An attacker logged in to wp-admin with a real password, installed a web terminal and hid a four-function JS loader in an active plugin. How it works, how to find it.
Read Article
Who we are
A small, specialised team. One subject.
KKAA Solutions is a specialised cybersecurity and website malware remediation company based in Athens, Greece. We work only on malware in websites and web servers: cleanup, investigation, hardening and monitoring. We do not build sites, sell hosting or resell security products, so when we tell you what we found and what is needed, there is no other motive behind the recommendation.
We work with site owners, online shops, agencies and hosting providers in Greece and worldwide, in English and Greek.
10+Years in web security
2,000+Incidents resolved
EN / ELService in English and Greek
Capabilities
- Malware analysis & forensics. Every payload decoded and every persistence layer traced to its source.
- Incident response. Containment, removal and verification, with evidence preserved before any change.
- Backdoor hunting. Files, database, scheduled tasks and caches checked, not only the obvious.
- Database forensics. Injected options, rogue accounts, triggers and spam content found and removed.
- Linux server administration. Shell-level work on hosting servers and control panels.
- Web application firewalls. Rules written and tuned against real attack traffic.
For hosting providers & agencies
Partner rates per incident, monthly retainer, reports under your own brand and a direct channel to the analyst.
What clients say
Verified client feedback — submitted through our client portal after case completion.
Dealing with a hacked website? Get help now, or see the published prices first.
Hacked site, or just want to know where you stand?
Send us the site address and what you see. We reply by email with the service that fits and the price, before anything starts.