What you need to do when you are being hacked. Wordpress

1. URGENT: Hacker’s Attacking WordPress
and YOU’RE at Risk!
http://sbabzy.com/urgent-hackers-attacking-wordpress-and-youre-at-risk/
WordPress, one of the leading publishing software’s for websites, has come under attack by
hackers, leaving hundreds of thousands of websites vulnerable. Reports show that one in
every six websites run on WordPress, making the internet a virtual playground for hackers
with the potential for devastating results.
http://sbabzy.com/urgent-hackers-attacking-wordpress-and-youre-at-risk/
It is believed that WordPress hackers have obtained an estimated 90,000 IP addresses and are
using brute-force dictionary based software to find the passwords for the default ‘admin’
username that WordPress creates. If these passwords are hacked, it will allow the WordPress
hackers access to the administrative panel where they can view and change information on
the users account. While that can create a pretty big problem, the bigger problem is that this
small scale attack may be a prelude to a larger attack down the road.
http://sbabzy.com/urgent-hackers-attacking-wordpress-and-youre-at-risk/
CloudFlare CEO, Matthew Prince said, “As for the scope of the attack, we saw attacks on
virtually every WordPress site on our network.” With a massive amount of websites at risk,
it is essential that you do what you can to protect your account.
Protect Your Website and Your Servers!
If you use WordPress then there are a few steps that you can immediately take to help protect
your account from attack, and we recommend that you do them right now!
http://sbabzy.com/urgent-hackers-attacking-wordpress-and-youre-at-risk/
Change Your Password! Even if you have changed your password recently, do it again.
Use six to eight letters, numbers and symbols. The more complex the combination, the
harder it is for a dictornary based software to hack it. Good passwords contain upper and
lower case letters, numbers mixed in the middle and symbols (@#!*) between the letters and
numbers. (Example: p@s#W0rD!)
Change Your User Name! The WordPress hackers are targeting account holders who did
not change their username when they signed up. WordPress, by default, gives the username
‘admin’ that needs to be manually changed. If you are using ‘admin’ as your username,
change it to your name or your company name.
http://sbabzy.com/urgent-hackers-attacking-wordpress-and-youre-at-risk/
Install a Plug-in! There are a number of WordPress plug-ins that will limit the amount of
login attempts from the same IP address. While this may not be a fail-safe solution as

2. hackers generally have access to a large data base of IP addresses and networks, it will add a
layer of protection to your website.
Also, if you host your site on WordPress you can turn on the two-step authentication feature.
To enable this security feature, go to the security tab in your WordPress account settings and
the wizard will help you with the rest.
While teams are actively working to stop the attacks, a scary predication from CloudFlare
indicates that there may be more to come. “One of the concerns of an attack like this is that
the attacker is using a relatively weak botnet of home PCs in order to build a much larger
botnet of beefy servers in preparation for a future attack. These larger machines can cause
much more damage in DDoS attacks because the servers have large network connections and
are capable of generating significant amounts of traffic.”
http://sbabzy.com/urgent-hackers-attacking-wordpress-and-youre-at-risk/