My account is hijacked

• 

  ichyfitri28 · Member · Aug 15, 2017 at 7:26 am

  • Copy link
  • Add topic to favorites

  Hi. I’m Ichy. I just wanna asked, why my account is hijacked? I have activated Two-Step Authentication and backup codes for my blog securities. But it is not working. There is someone upload post new article and there is’nt me.

  This is an article I did not write:

  ichyfitri membuat perubahan berikut menjadi “just look at that” [sunting] Pos pada 14 August, 2017 at 1:41 UTC

  Revisi @ 0000-00-00 00:00:00 Kiriman saat ini @ 2017-08-14 01:41:49
  Content

  <img src=”https://ichyfitri.files.wordpress.com/2017/08/b96c015545c3b3ad.jpg” alt=”” width=”380″ height=”320″ class=”alignnone size-full wp-image-2233″ />
  <img width=”380″ height=”320″ src=”(email visible only to moderators and staff)” alt=”image” />
  Hey, Hey,
  You wouldn’t imagine what There is on the Internet, just look at that here open link You wouldn’t imagine what There is on the Internet, just look at that here open link

  So, what i must to do?

  The blog I need help with is: (visible only to logged in users)

• 

  staff-zinnia · Staff · Aug 15, 2017 at 11:55 am

  • Copy link

  Hi –

  Can you tell me where you’re seeing this on the site? Have you already updated your password? It’s also a good idea to update the password to your 2 factor device and email account.

  The only way for someone to add images like this to your site is by signing in directly to your account or through their user role if you had added them to the blog as a contributor.

• 

  ichyfitri28 · Member · Aug 15, 2017 at 12:10 pm

  • Copy link

  This is on my email. The article is already delete by me. I’m already update my password and my email account. No someone i added as contributor in my blog.

• 

  ichyfitri28 · Member · Aug 15, 2017 at 12:13 pm

  • Copy link

  Btw, my friend also seeing this and she asked me about that. My new posting always link to my twitter, so if i have new posting, my twitter friends can see that.

• 

  supernovia · Staff · Aug 20, 2017 at 4:58 am

  • Copy link

  @ichyfitri28 I hope you don’t mind me jumping in to help. I see you have Post by Email enabled and I’m guessing you’ve somehow let the secret out about that address, because the affected posts are definitely coming through that way.

  If you’re no longer using Post by Email, please disable it. If you are using it, generate a new address and keep it safe.

  Post by Email