I've been hacked. My blog is down.

  • Unknown's avatar
    deaconsolomon · Member ·

    I need security on my blog so the person who did this to me cannot do it again. So whaddya got?

    The blog I need help with is: (visible only to logged in users)

  • Unknown's avatar
    geoffreyshilling · Member ·

    Could you please verify the website address of the site that was hacked and is down?

    WordPress.com takes security seriously and works to protect every site it hosts.

    Learn more about WordPress.com security:
    https://en.support.wordpress.com/security/

  • Unknown's avatar
    deaconsolomon · Member ·

    What part of dekesolomon.wordpress.com don’t you understand? Is that not a website address?

    Whoever did it got in and changed some of my blog post URLs. When I found it, I figured if they can change the URLs of my blog posts, they can do just about anything else they want to do. So I pulled my posts down and tried to delete the hacked blog — which is a thing I have not yet managed to accomplish.

  • Unknown's avatar
    geoffreyshilling · Member ·

    The reason I asked the domain is because often times the site listed under “The blog I need help with” or the one listed in a profile is not the actual site people are asking a question about. Since I am a volunteer on the forums, I am unable to see what other sites, if any, are attached to a user profile. Verifying the domain helps guide me in the questions I ask or steps I recommend.

    I would suggestion changing your password to something strong if you haven’t already. You could also add extra protection by using two-step authentication:
    https://en.support.wordpress.com/security/#add-an-extra-layer-of-security-authentication

    tried to delete the hacked blog

    Are you trying to delete the entire site or just the content that is on there?

    You can delete your site by following the instructions here:
    https://en.support.wordpress.com/delete-site/

    Deleting a site permanently removes it and you will never be able to use it again.

    If you are just trying to clear out the content, you can delete all the content from your site and still keep your current WordPress.com address by performing the following steps:

    Note: Please keep in mind this action is permanent.

    Delete all posts
    Delete all pages
    Delete all categories
    Delete all tags
    Delete all media

    If you have a lot of content and would like to have the staff assist with this, please add the “modlook” tag in the right column. You will need to be logged in to the user account you created the site with, confirm the URL of the site you would like them to empty, and that you understand this action is permanent.

    Read more about emptying your site: https://en.support.wordpress.com/empty-site/

  • kokkieh · Staff ·

    Hi there,

    I don’t see any evidence that your site was hacked by looking at the logs. If someone gained access to your blog, they were using your username and password to do so as there hasn’t even been a recent password reset done on your account.

    Have you recently logged into your account on a public computer or is your computer used by more than one person? If someone else used a browser already logged into your account they’d have full access to your site.

    I suggest you update your password to something impossible to guess and also enable two-factor authentication so anyone trying to log into your account will have to also input a one-time code to gain access. Aside from that, make sure to always log out of your account and clear browser cookies when you’re done, especially if you’re on a shared computer.

    And never let your browser save passwords for you – most browsers save login details in plain text, meaning anyone who knows how to find the files on your hard drive can see all the passwords you’ve saved in your browser and use them to log into your accounts.

  • Unknown's avatar
    deaconsolomon · Member ·

    Well that’s all very nice to know and I’ll keep it in mind for the future. Meanwhile, please delete http://www.dekesolomon.wordpress.com because I don’t live there any more. I’ve moved to Bluehost and hope for better luck with a protected domain.

    It’s been fun, but the hack, to me, meant that the fun is over.

    Thanks for your response.

    Deke

  • kokkieh · Staff ·

    It’s not possible for me to delete the site on your behalf. Only the account that owns the site can delete it. That means only someone logged in with your username, i.e. you, can do it.

    To delete your site, please go to My Site ->Settings. You’ll find the option at the bottom of that screen.

  • The topic ‘I've been hacked. My blog is down.’ is closed to new replies.