Japanese Keyword Hack: How to Clean Injected Spam and Recover Google Rankings

If you search your domain in Google (site:yourdomain.com) and see hundreds or thousands of pages titled in Japanese characters selling luxury goods or knock-off footwear, your WordPress installation has fallen victim to the Japanese Keyword Hack (also known as the Japanese SEO Spam injection).

This is one of the most destructive attacks for small businesses because it directly destroys your organic search rankings. Google's crawlers detect thousands of newly generated spam pages, flag the site as compromised or spammy, and demote your legitimate content.

What Is Actually Happening to Your Site?

The attackers didn't just deface a page. They compromised your site to turn your domain into an SEO link farm:
1. Dynamic URL Injections: The malware generates virtual pages on the fly using a rogue script in your root directory or /wp-content/. These pages return HTTP 200 OK only to search engine crawlers (Googlebot, Bingbot), while serving regular content to you. This is called user-agent cloaking.
2. Search Console Infiltration: In many cases, the malware adds a rogue verification meta tag or HTML file to your site, registering the attacker as an owner in Google Search Console to manipulate sitemaps.
3. Database & Core Tampering: Malicious rewrite rules are inserted into your .htaccess file and hidden PHP droppers are tucked into core directories like /wp-includes/.

Immediate Actions to Take Right Now

1. Verify Search Console Ownership: Log into Google Search Console immediately. Go to Settings → Ownership verification and remove any unknown users or token files.
2. Inspect .htaccess for Cloaking Directives: Attackers use conditional rewrite rules checking for HTTP_USER_AGENT matching Googlebot.
3. Do Not Just Delete the Generated URLs: The URLs don't physically exist as static files. Deleting them one by one in Search Console does nothing until the underlying PHP script generating them is eliminated.

If your business relies on Google traffic, every day this infection persists causes lasting organic rank suppression. Request an emergency rescue with Delvok and our engineers will forensically eradicate the injection, restore clean sitemaps, and coordinate priority reindexing with Google Search Console.