attack of botnets

• 

  omindfulness · Member · Apr 16, 2013 at 2:46 pm

  • Copy link
  • Add topic to favorites

  The worlds IT press are publishing the news that there is a massive
  attack of botnets happening against WordPress sites right now.
  This has been going on for almost a week.

  The BBC, Zdnet and all the tech press are reporting that something
  in the region of 90,000 bots are targetting the admin account under
  a massive bruteforce attack.

  Some people are saying just install one of the free plugins. Its
  not enough – you need to be comprehensive with your security.
  First, be sure not to have an “admin” as your main user.
  This is critical to change right away.

  Has anyone heard of this ? got any advice ? how do I remove “admin” form main user ?
  Thanks Alison

  The blog I need help with is: (visible only to logged in users)

• 

  thistimethisspace · Member · Apr 16, 2013 at 11:56 pm

  • Copy link

  The botnet attack is on self hosted WordPress>ORG installs.

  See here http://en.support.wordpress.com/security/
  Focus on http://en.support.wordpress.com/security/#choosing-and-using-good-passwords

• 

  thistimethisspace · Member · Apr 16, 2013 at 11:57 pm

  • Copy link

  See also http://en.support.wordpress.com/security/two-step-authentication/

• 

  raincoaster · Member · Apr 17, 2013 at 12:39 am

  • Copy link

  I wrote an article about this for the daily dot. As the user with the username “Admin” on WordPress.com does not have a blog at all, your risk is probably minimal, but there are four things you can do to make your blog super-secure.

  4 easy steps to protect your WordPress blog