TORX Racing
Project overview
TORX Racing manufactures performance watercraft parts and sells online through WooCommerce. The store had been hacked and was being hit by fraudulent, bot-driven orders.
The challenge
Unauthorised administrator accounts, spam auto-posting and betting-related comments from a previous hack, plus repeated failed orders on the same product from rotating IP addresses despite CAPTCHA protection. We diagnosed this as scripted card-testing fraud, not simple bot spam.
Objectives
Remove the hack and every trace of unauthorised access.
Stop fraudulent card-testing orders.
Keep genuine customers able to buy without friction.
Strategy
Clean and update first, then build a layered defence that works even when attackers rotate IP addresses.
Design
Development
Updated WordPress core, all plugins and the theme; removed unauthorised admin accounts and spam content. Built a custom WooCommerce security plugin with checkout rate limiting, automatic IP blocking based on failed-order velocity and a site-wide lockdown mode that detects fraud bursts across rotating IPs.
SEO & marketing
The solution
A clean, up-to-date store with a custom fraud-protection layer tailored to how the attacks actually worked.
Related guide: How we cleaned a hacked WooCommerce store.
Results
Fake orders and spam content stopped, genuine orders continued normally and the site runs without errors. The client hired us again for security work on another website.
Screenshots
Technology & tools
Client feedback
Want a project like this?
Tell us about your goals and we’ll outline how we would approach them, honestly and without jargon.