Site hacked?

• 

  francesbell · Member · Nov 29, 2011 at 8:08 am

  • Copy link
  • Add topic to favorites

  I have been told that my site francesbell.wordpress.com has been compromised. I have changed my password and theme. Here is what I was told.
  “This does not look like comment spam to me, more a systems hack, looking at the source code it looks to be associated with some functionality called load adds and points at this address http://mediaforce.sitescout.netdna-cdn.com/brand-english_4s_300x250-17b3b59.gif  “
  Is this part of your normal ad-serving or do I have a problem?
  Blog url: http://francesbell.wordpress.com/

• 

  andrewspittle · Staff · Nov 29, 2011 at 6:38 pm

  • Copy link

  The only way your site could be “hacked” is by someone knowing your username and password. That’s the weakest link in any site’s security.

  We have guidelines for password security in our support docs. Did anyone know your username and password or have access to your email address?

  Also, what types of behavior were you seeing that made you think it was hacked?

• 

  francesbell · Member · Nov 30, 2011 at 9:29 am

  • Copy link

  I don’t believe anyone knows my password (since changed). It was reported to me by someone visiting my blog (details in quotes in my message above). Can you confirm if this part of ad-serving and can you point me to more information about this?

• 

  staff-blorbo · Staff · Nov 30, 2011 at 10:09 pm

  • Copy link

  That’s one of our ads.

  To support the service (and keep free features free), we sometimes run advertisements, and the agreement for this has been in our terms of service since 2006.

  We try hard to only run them in limited places. If you would like to completely eliminate ads from appearing on your blog, we offer the No-Ads Upgrade: http://en.support.wordpress.com/no-ads/

  However, that’s not a type of ad we want to run. I have reported it to our ad provider, and it should be gone shortly.