Hacked

• 

  xellefitness · Member · Feb 22, 2017 at 6:11 pm

  • Copy link
  • Add topic to favorites

  I think I’ve been hacked because I’ve received more than 200 new registrations on my email, something that has never happened before. Is it my WordPress site that is hacked or is it my email? Please advise.
  P/S
  I have changed the WordPress password and I’m about to change my email password as well. Any input is welcome.
  Thanks

  The blog I need help with is: (visible only to logged in users)

• 

  timethief · Member · Feb 22, 2017 at 11:31 pm

  • Copy link

  I will type modlook into the sidebar tags on this thread for a Staff follow-up. How do I get a Moderator/Staff reply for my question? https://en.support.wordpress.com/getting-help-in-the-forums/#how-do-i-get-a-moderatorstaff-reply-for-my-question Also subscribe to this thread so you are notified when they respond and be patient while waiting. To subscribe look in the sidebar of this thread, find the subscribe to topics link and click it.

• 

  timethief · Member · Feb 22, 2017 at 11:33 pm

  • Copy link

  Go to your email program immediately and change the password to a very difficult one because that’s how many hackers gain access to blogs.

  Read > http://en.support.wordpress.com/security/

  Change your blog password to a very difficult one > http://en.support.wordpress.com/passwords/#change-your-password
  You can also reset your password via your Settings tab on the WordPress.com home page:
  http://wordpress.com/#!/settings/

  Use a secure, encrypted connection to connect to your Dashboard. Under Users → Personal Settings, check the box that says “Always use HTTPS when visiting administration pages, and click Save Changes.

  Use two step authentication http://en.support.wordpress.com/security/two-step-authentication/

• 

  supernovia · Staff · Feb 22, 2017 at 11:35 pm

  • Copy link

  @xellefitness can you send the subject of one of those emails? I’ve checked our logs to see what we sent you and I don’t see anything similar to what you’ve described, but I’d like to find out more.

• 

  timethief · Member · Feb 22, 2017 at 11:42 pm

  • Copy link

  @supernovia
  Noted and I will ask for that too in future threads.

• 

  supernovia · Staff · Feb 23, 2017 at 7:03 am

  • Copy link

  Thank you :)

• 

  justjennifer · Member · Feb 23, 2017 at 8:19 am

  • Copy link

  @supernovia – Just a quick question. Now that WordPressdotcom has moved entirely to HTTPS, is it still necessary to check the “always use HTTPS when visiting…” I would have thought that was now the default for everyone and don’t see that setting in the dashboard any longer. Thanks for any info you can share.

• 

  supernovia · Staff · Feb 23, 2017 at 5:37 pm

  • Copy link

  @justjennifer yeah, we just redirect everything to https for everyone.