The jQuery That Wasn't: A 482-Byte Core File Swap That Phoned Home
A 482-byte fake jquery.min.js in WordPress core kept the real banner, beaconed each admin page load and broke wp-admin. A forged nanosecond mtime exposed the rest.
Read Article
KKAA Solutions by K.K. Bourdakos
Website Malware Removal & Incident Response
We clean hacked websites — WordPress, Magento, Joomla, OpenCart, any other CMS or fully custom application: malware removal, backdoor hunting and incident response for site owners, web agencies and hosting providers. Most cleanups are completed within 24 hours and every job ends with a written findings report.
Latest Research
November 3, 2026
October 30, 2026
A Trojanized Claude Code Extension That Turns Your Machine Into an SSH Server
A tampered Claude Code 2.1.313 build from the Cursor Marketplace plants an SSH key, starts sshd and opens a reverse tunnel on load. How it works, how to check.
Read Article
October 27, 2026
A Joomla Backdoor With No eval: Remote SQL in Template Overrides and a Login Stealer
A Joomla backdoor with no eval ran SQL from a remote server via the site's own DB layer, hidden in template overrides, beside a login password stealer. Detection inside.
Read ArticleAbout Us
Who We Are
KKAA Solutions is a specialised cybersecurity and website malware remediation company based in Athens, Greece. We detect, analyse and remove malware from hacked websites and servers, and document every incident in a written report.
Location
Athens, Greece
Contact
Business
KKAA Solutions (Κ. ΜΠΟΥΡΔΑΚΟΣ & ΣΙΑ Ε.Ε.)
ΑΦΜ/VAT ID: 801985029
ΓΕΜΗ/GEMI: 167601003000
Capabilities
- Malware analysis & forensicsEvery payload decoded and every persistence layer traced to its source.
- Incident responseContainment, removal and verification, with evidence preserved before any change.
- Backdoor huntingFiles, database, scheduled tasks and caches checked, not only the obvious.
- Database forensicsInjected options, rogue accounts, triggers and spam content found and removed.
- Linux server administrationShell-level work on hosting servers and control panels.
- Web application firewallsModSecurity rules written and tuned against real attack traffic.
- WordPress
- WooCommerce
- Magento 2
- Joomla
- OpenCart
Track Record
- Incidents resolved
- 2,000+
- Years in web security
- 10+
- Typical turnaround
- <24h
- Written findings report with every job
- Fixed prices agreed before work starts
- Service in Greek and English
What Clients Say
Verified client feedback — submitted through our client portal after case completion.
Dealing with a hacked website? Get expert help now — most cleanups are completed within 24 hours.