Web · Incident Response · Incident Response
Corporate WordPress backdoor + 120 Japanese SEO spam URLs · Google rank dropped 78%
A B2B software firm's corporate WordPress site was compromised 6 months ago. Google Search Console issued a 'JP spam content' warning. 14 backdoor PHP files were added to wp-includes/, and 12,000 hidden posts were added to the DB. The site's Google rank dropped 78%. You will make 11 critical decisions in sequence.
Before you start the scenario
- You are the decision-maker in this incident · every choice leaves time/cost/reputation behind
- There are no wrong answers · just like in real life · but some paths are more expensive
- You can restart it anytime · try different paths
- At the end, a 3-axis score + alternative routes are shown