[wp-hackers] Website was hacked

[Lee Rickler]

Sounds like a server side hack.

Step 1, Inform the host and ask what they are doing about it.
Step 2, Wait for a reply from the host blaming WP.
Step 3, Move hosts.


On 16 Jun 2013, at 21:48, webmaster at qcustodial.com wrote:

> I went to login to my WordPress site today but it was not accepting my
> username/password. It kept saying invalid username which I knew was valid.
> I accessed cpanel then phpmyadmin to find the username, password, and
> email had been changed. I used the generator on your site to provide a new
> password hash then using phpmyadmin I change the username and email back
> and set a new password. The password has been changed along with my cpanel
> and mysql passwords. It does not appear any changes were made other than
> this.
> 
> The wired thing is the username was changed, which cannot be done in
> WordPress you have to do it in the database itself. Leading me to believe
> it was the web host that was hacked not my WordPress install. What are you
> thoughts? What else should I do?
> 
> _______________________________________________
> wp-hackers mailing list
> wp-hackers at lists.automattic.com
> http://lists.automattic.com/mailman/listinfo/wp-hackers