Year and a half educated us that WordPress security should not be taken lightly by any means. Between 15% and 20% of the planet's high traffic websites are powered by WordPress. The fact it is an Open Source platform and everyone has access to its Source Code makes it a prey for hackers.
Cloning your website is another degree in fix malware problem that may be very useful. Cloning simply means that you have backed up your website to a totally different place, (offline, as in a folder, so as not to have SEO problems) where you can get it in a moment's notice if necessary.
Safeguard your login credentials - Don't keep your login credentials important link where they might be found by a hacker. Store them offsite, as well as offline. Roboform is for protecting them good . Food for thought!
Is to delete the default administrator account. This is important because if you don't do it, malicious user know a user name which they could attempt to crack.
Upgrade now if you're not running the latest version of WordPress. Similar to keeping your door unlocked when you leave for vacation, leaving your website is.
Change your password, often, or at least your WordPress admin and password username and collect and utilize other good WordPress safety tips to keep hackers out!