i appear to have been hacked

• 

  juliabird · Member · Oct 9, 2017 at 11:38 am

  • Copy link
  • Add topic to favorites

  Hello – something odd has happened to my blog – the header has changed, the links are all heading towards something called ‘clitools’ and the theme has changed. Have I been hacked? What can I do to get back to normal? Thanks in advance for assistance …

  The blog I need help with is: (visible only to logged in users)

• 

  mcatalano · Member · Oct 9, 2017 at 1:48 pm

  • Copy link

  Me too. Same clitools thing. Please fix now.

• 

  pavanraheja · Member · Oct 9, 2017 at 2:00 pm

  • Copy link

  Hi @juliabird,

  I had a closer look at your site, and the site seems to be working fine. The Header is directing to your homepage. I check links on your Homepage they appear to address correctly.

  The theme used is “Plane”. Here is the current screenshot of your site:

  

  Could share further details, you could share a screenshot of your site, and also the links where the header gets directed. Also, let us know which theme were you using previously and what did it change too. You can learn about making screenshot here:

  Take a Screenshot

  Let us know the details, would be happy to assist you further.

  Thanks!

  @mcatalano: You could start a new thread, and provide us the details as well. We would be happy to help you ahead.

• 

  billh93 · Member · Oct 9, 2017 at 2:21 pm

  • Copy link

  Hello @juliabird,

  Your site does seem to be fine from my end. I’ve inserted the ‘modlook’ tag so WordPress staff can take a closer look at it.

  Best,
  Bill

• 

  juliabird · Member · Oct 9, 2017 at 2:49 pm

  • Copy link

  Hi – thanks all! It looks fine again now, the only thing I changed was my log in password – I wonder if that did the trick?

• 

  pavanraheja · Member · Oct 9, 2017 at 3:07 pm

  • Copy link

  Hi again,

  Glad to know everything is fine now. It might be possible a loose password could create a vulnerability. You can try to keep the password as strong as possible. Also, if you would like, you can set up a Two-Step Authentication to be on the safer side. Here is a support document to help you further:

  Enable Two-Step Authentication

  Hope this helps, please do let us know if we can help you with anything else.

  Thanks! :)

• 

  gemmacevans · Member · Oct 9, 2017 at 3:08 pm

  • Copy link

  Hi juliabird,

  the links are all heading towards something called ‘clitools’

  I’ve checked your account and I can’t see an suspicious activity to suggest it was hacked. If you are ever concerned that someone may have accessed your account, changing the password is a good idea in order to help keep your account secure.

  I can’t see any links to clitools, where were you seeing them? For example, in your post content or in the menu.

  Thanks!

• 

  pavanraheja · Member · Oct 9, 2017 at 3:08 pm

  • Copy link

  Also, as the thread is tagged to the staff, they would provide the feedback with the issue further.

  Thanks again!

• 

  gemmacevans · Member · Oct 9, 2017 at 3:10 pm

  • Copy link

  Hi pavanraheja,

  I think we sent our replies at the same time :)

• 

  pavanraheja · Member · Oct 9, 2017 at 3:13 pm

  • Copy link

  @gemmacevans: Yeah just a few seconds difference! :) Apologies! :)

• 

  gemmacevans · Member · Oct 9, 2017 at 3:42 pm

  • Copy link

  No worries at all Pavan!

• 

  gemmacevans · Member · Oct 10, 2017 at 8:29 am

  • Copy link

  Hi juliabird,

  I just wanted to give you an update — we’ve discovered that links to clitools appeared due to an internal issue. You haven’t been hacked and we are working on a fix at the moment.

  Thanks for reporting this :)

• 

  juliabird · Member · Oct 10, 2017 at 8:34 am

  • Copy link

  ah, that’s good to know, thank you!

• 

  gemmacevans · Member · Oct 10, 2017 at 8:48 am

  • Copy link

  You’re welcome!