Replies: 0
I received a notification that the recent Wordfence scan on a clients site has 667 issues (most if not all lableled critical) and from what I can see they all have index-https.df at the end of the URL.
A quick Google search tells me index-https.df is part of Pandas for Python. I’m out of my wheelhouse here.
There’s also this:
“Details: This file appears to be installed or modified by a hacker to perform malicious activity. If you know about this file you can choose to ignore it to exclude it from future scans. The matched text in this file is: x\x9c\xd5}“
Where did this suddenly come from? Has it always been there and just now is an issue? Or is the x\x9c\xd5 the issue and indicitave of a hack?
I have Simple History installed, and it shows no access other than myself and the client. Just a few plugin upgrades.
Thanks in advance for any help or insight you can offer.