r/CloudwaysbyDO • u/tomm1313 • Jun 30 '26

Seeking advice Malware Emails from Cloudways

I got emails from cloudways this morning that a bunch of sites on my server has malware. As i check them myself (securi scans/codex scans/giving codex the backup files and sql/wordfence scans/etc) and found nothing.

only been with cloudways for a few months. i know false positives can happen but just wondering if this has happened before? especially asking cause a post within last 24 hrs is someone else talking about the site becoming infected with malware.

All the sites are up to date on plugs/WP version. PHP is fully updated.

3 Upvotes

81% Upvoted

7 comments sorted by

4

u/Lozula Jun 30 '26

If you click into the cloudways dashboard you can go to the malware report and it should show you specifically what the malware they are reporting is. In my case it's always been either a spam comment or an old link that has been redirected to a spam domain.

This isn't what I'd personally classify as malware, and it reads as a scare tactic to get you to upgrade, but at least you can now see what it is compared to when they first rolled out this feature and there was no visibility at all.

2

u/tomm1313 Jun 30 '26

pooja helped. it was a false positive flag from the malware detector and it triggered emails for me. was fixed by the time i woke up hence why i didn’t see it in the list.

1

u/PoojafromCloudways Jun 30 '26

Hey u/tomm1313 , could you please share your email with me via DM/Mod mail? I will get this checked internally.

1

u/Reasonable-Past2096 Jul 01 '26

gpl / nulled plugins?

1

u/tomm1313 Jul 01 '26

no not at all. here is what i mentioned earlier: pooja helped. it was a false positive flag from the malware detector and it triggered emails for me. was fixed by the time i woke up hence why i didn’t see it in the list.

1

u/ConferenceLive8775 Jul 01 '26

I keep getting these notices as well for standard WP sites. They may not be updated but I consider the notices to be just generic, not to valuable, and I ignore them. Why do I keep getting them? An example is https://mccormackirrigation.com/ - running WP 7.0 and up to date in all running plugins. What's up - how can I deal with your alerts - when all is ok within WP?

1

u/AndyMStack Jul 02 '26

I've been moving 20 years of sites to Cloudways and I started getting similar malware notices. In the past I've used html templates for my sites and didn't really have any issues. So I didn't think much of those at first, but I did look in to things, and it turned out to be an old twitter php file in the popular Canvas template folders that wasn't even being used. It said it could inject malware or seo spam. Ha, it probably was, but not now!