Alert: Hackers attack 90000 wordpress blogs in last one week !

Purnendu
from Pune
11 years ago

The attacks began last week, and have affected more than 90,000 blogs so far. The hackers behind the attacks have combed through WordPress accounts and attempted to guess passwords via brute force.

Read the complete news here :

http://mashable.com/2013/04/15/hackers-wordpress-blogs/?utm_medium=email&utm_source=newsletter

Edited 11 years ago
Reason: heading

Replies 1 to 11 of 11

Purnendu
from Pune
11 years ago

If you are running a Wordpress site, I would request you to boost your security. Please do the following:

1. Make your password stronger

2. If you are using the generic 'admin' username, please change it to a more complicated and difficult to guess name. You can do this by the following plugin: Admin username changer

3. You can also use security plugins. I have been using Stop Spammer Registrations Plugin. If you are using Buddypress, then this is even better to use this.

4. Try to find a way to have two levels of security.

Purnendu
from Pune
11 years ago

More on the 2-Step Authentication

http://en.blog.wordpress.com/2013/04/05/two-step-authentication/

Purnendu
from Pune
11 years ago

Its only for Wordpress.com :(

Will need to find something for selfhosted ones

Purnendu
from Pune
11 years ago

Also, please make a backup of your blogs asap. If everything fails, these backups will save the day. The attacks continue and are spreading.

Anunoy Samanta
from Bardhaman
11 years ago

Can I have a backup of my blogspot blogs?...how?

Dhaval Thakur
from Chennai
11 years ago

For blogspot.com blogs go to settings and then click on export blog

Anunoy Samanta
from Bardhaman
11 years ago

thanks Thakur

Purnendu
from Pune
11 years ago

A note: For selfhosted Wordpress, merely taking an export might not be enough. A backup from cPanel and the database will be a good idea. Am running mine just now.

Aditya Dey
from Kolkata
11 years ago

Yup absolutely right......precaution is always a good idea.....

Hmmm
from Nainital
11 years ago

It is really a freaking news for all the bloggers who have given the big part of their whole day in writing interesting blogs one after the other. I wish all the bloggers will benefit from the article you have mentioned.After all, 'Prevention is always better than a cure(sometimes completely unavailable)'.

Chaitanya Kulkarni
from Mumbai
11 years ago

set a dificult password and delete the login page itself .

there are tons of tools to bulk hack its pretty usual on the scene

wp may not always have a vulnerability but the plugins/themes you use can have

Wordfence is a good solution

Cheers!

Purnendu
from Pune
11 years ago

Very true. Actually many hacks usually happen due to plugins.

BTW , how to delete the login page ? How do we login if it is not there ?

Animesh
from Mumbai
11 years ago

How do you delete the login page? And then how do you login yourself?

Chaitanya Kulkarni
from Mumbai
11 years ago

whenever you want to login just upload the login page and login lol

delete login page from FTP, how else?

n if u using blogspot or any other such service, just have a long n strong password thts it

Animesh
from Mumbai
11 years ago

I agree Chaitanya. Worldfence is amazing. I have it on one of my blogs and it helps a lot.

Yesterday only, I typed the wrong password by mistake, that too 5 times. and it locked the login and I could unlock it ony via my own mailbox. This is a good plugin for such attacks.

Purnendu
from Pune
11 years ago

One more point: If you feel your site has been compromised, do not forget to run a malware check on your website. Search Engines usually ban sites with malware on them.

A few I found on net are:

http://siteinspector.comodo.com/

http://wordpress.org/extend/plugins/sucuri-scanner/

http://www.unmaskparasites.com/

https://www.symantec.com/verisign/trust-seal?inid=vrsn_symc_ssl_SmallBiz