I just discovered that my Wordpress websites has been hacked! Large number of links is changed and now have what look like random number at the end. For the example: http://www.mysite.com/2012/06/breakfast/1345431480000/1345720497000 was ending with 'breakfast/' - numbers after that are added by some script. Of course this gave me a lot of 404 error and broke site. Above link actually doesn't lead anywhere.
Second - some posts got name of the brands made (for example Tory Burch) made into links. We checked and when we published post this was NOT link, just normal text. But something made this text into link http://mysitename.com/tory-burch-shoes-flats/br/v=1/2534374302125571.htm Again above link doesn't lead anywhere. Just causing 404.
Obviously there is a script on my websites that change links and using keyword to make links. For now these links just cause 404, but maybe it's a hack to forward my traffic somewhere else? Do you know what could be? Or do you have suggestion how to prevent this link editing and adding?
I should mention that websites running on GoDaddy VPS server. I never had any security issues before. using WP 3.3.1 with major plugins running. No 3rd party of weird plugins. Currently I am looking on server to try to spot some unusual file or script running.
Trying to find solution online and your help would be appreciated. Thanks
Dean
