WordPress admin username changed to html404

  • Unknown's avatar

    Posting this as a public service after finding a similar thread here:
    my-wordpress-username-has-changed-to-html404

    my client’s admin account was hacked this morning, same symptom, admin user account name replaced with ‘html404’

    Site is running a selfhosted version of wordpress, 4.9.1, NOT tied to a wordpress.com account.

    I immediately:
    – logged in and confirmed user html404 appeared in user list.
    – opened the html404 user profile in the profile editor
    – logged user out of all sessions
    – changed the user email and password
    – created another admin profile to replace the hacked profile
    – deleted the hacked profile, attributing all its content to the new
    admin profile

    I’m still in the process of conducting a forensic analysis on the website access logs. Will post findings on this thread.

    FYI – I was notified of the incursion via email sent by the Wordfence plugin which is installed on this site.

    The blog I need help with is: (visible only to logged in users)

  • Unknown's avatar

    oops, my apologies. looks like I should have posted this elsewhere. to be clear, I DO NOT need help with blog at bodhirayo.wordpress.com.

  • Unknown's avatar

    hmmm, couldn’t find a better forum for this post. so until I hear otherwise I’ll assume this is a good home for the thread… thanks and blessings to the forum moderators for your patience! 💚😊

  • Unknown's avatar

    Sheesh. Silly me. Posting this on *Wordpress.org* forum…

  • Unknown's avatar
  • The topic ‘WordPress admin username changed to html404’ is closed to new replies.