I think my website has been hacked
-
I have been receiving emails informing me about failed login attempts on my wordpress account and now I am trying to edit my website and wordpress isn’t recognizing the e-mail account that I’m receiving notices on. I’ve been looking through my inbox for the registration confirmation and it’s gone. All I have are the security messages so I can’t confirm ownership of the site.
The blog I need help with is: (visible only to logged in users)
-
re: hacked accounts and blogs
If anyone is posting anything to your blog or removing anything from it, or changing anything in it, or if your blog has been deleted and you did not delete it, then it’s most likely that you have provided them with the ability to do so, either deliberately by adding them as official users, or by allowing them access to your login information, or by posting content that makes it easy for them to guess what your log-in information is.For you the question that needs to be answered is: Who, aside from me, has access to my login information?
If you registered this blog:
Go to your email program immediately and change the password to a very difficult one because that’s how many hackers gain access to blogs.Read > http://en.support.wordpress.com/security/
1. If you can log-in go here > Users > All Users and delete any user that does not belong there.
2. Disable post by email > http://en.support.wordpress.com/post-by-email/
3. Disable post by voice > http://en.support.wordpress.com/post-by-voice/
4. Change your blog password to a very difficult one > http://en.support.wordpress.com/passwords/#change-your-password
You can also reset your password via your Settings tab on the WordPress.com home page:
http://wordpress.com/#!/settings/5. Use a secure, encrypted connection to connect to your Dashboard. Under Users → Personal Settings, check the box that says “Always use HTTPS when visiting administration pages, and click Save Changes.
6. Use two step authentication http://en.support.wordpress.com/security/two-step-authentication/
7. Run a security scan on your computer.
8. Never leave your computer logged into your blogs and walk away from it. Always log out properly.
I tagged this thread for Staff assistance. Please subscribe to it so you are notified when they respond. To subscribe look in the sidebar of this thread, find the subscribe to topics link and click it.
Staff have records of who did what under which username and login information and when they did it. I flagged this thread for a Staff follow-up. Please subscribe to it so you are notified when they respond. To subscribe look in the sidebar of this thread, find the subscribe to topics link and click it. Note that there is a backlog and be patient while waiting.
-
**that’s not actually the blog, I have created a second account in the event that I need to re-do the website. The actual blog I need help with is argobookshop.ca
-
Thank you for the fast reply. I can’t login. I have subscribed to the thread. The other problem is that it’s a business website which has had several administrators over the years. It could have very easily been hacked.
-
that’s not actually the blog … is that it’s a business website which has had several administrators over the years. It could have very easily been hacked.
Right and the support doc clearly states that only one Admin is recommended. https://en.support.wordpress.com/user-roles/
Please be crystal clear on the fact that without you providing the actual URL for the actual blog in question we are unable to help you. Post it now. Also tell us exactly which username account registered that blog and is its sole owner.
-
Just in case you are on about a site that is not hosted by WordPress.COM, like 30% of those who post here incorrectly please read on.
We provide support only for blogs hosted by wordpress.COM. We do not provide support for WordPress.ORG software installs.
WordPress.COM and WordPress.ORG are completely separate and have different username accounts, logins, features, run different versions of some themes with the same names, and have separate support documentation and separate support forums. Read the differences here http://en.support.wordpress.com/com-vs-org/
If you are asking about a WordPress.ORG software install and you don’t have a username account at WordPress.ORG account, then click http://wordpress.org/support/ and register one on the top right hand corner of the page that opens, https://wordpress.org/support/register.php so you can post to the support forums there.
Resetting your WordPress.ORG password http://codex.wordpress.org/Resetting_Your_Password
WordPress.org support docs are at https://codex.wordpress.org/Main_P -
argobookshop.ca – is a WordPress.ORG install – please see the links above for how to get help at WordPress.ORG
-
Oh god. I’m sorry. I thought it was .ORG at first and then thought it must be .COM since it’s not recognizing me. It is .ORG but I’m having the same troubles over there.
Thanks for your help. The .COM/.ORG thing must be the most annoying thing to deal with.
-
Thanks for the assist auxclass.
@meg0acosta
That site at https://argobookshop.ca is not hosted by WordPress.COM and we cannot help you. It’s a wordpress.ORG install.WordPress.COM and WordPress.ORG are completely separate and have different username accounts, logins, features, run different versions of some themes with the same names, and have separate support documentation and separate support forums. Read the differences here http://en.support.wordpress.com/com-vs-org/
If you don’t have a username account at WordPress.ORG account, then click http://wordpress.org/support/ and register one on the top right hand corner of the page that opens, https://wordpress.org/support/register.php so you can post to the support forums there.
Resetting your WordPress.ORG password http://codex.wordpress.org/Resetting_Your_Password
WordPress.org support docs are at https://codex.wordpress.org/Main_P
- The topic ‘I think my website has been hacked’ is closed to new replies.
WordPress.com Forums 