Friday, April 12, 2013

Update: Global Wordpress Attacks Still Going, but Muffled

Status Update: Global Wordpress Attacks

The global attacks on Wordpress sites (and now, other sites as well) are still going, although the Wordpress attacks themselves have been significantly mitigated by most web hosts as well as security services like CloudFlare through a combination of techniques specifically designed to combat this particular and unusually effective attack.

CloudFlare CEO Matthew Prince said, "the botnet has the power to test as many as 2 billion passwords in an hour"

- TheNextWeb: Brute force attacks on Wordpress continue...

That is a lot of passwords, and unfortunately most people have very easily guessable passwords - like password and 123456.

The first thing you should do is get a better password:

abetter.pw

The above site will generate a password of 29 characters with upper- and lowercase characters, numbers, and special characters. Hint: Drag the link above to your "Bookmarks bar" for one click access to a simple secure password generator.

If you need a place to store this password - download KeepassX and use the tips in my original article on the Wordpress brute-force attacks to make a memorable but still difficult password to unlock your Keepass with. This way you only have to remember one strong password, and you can store a new randomly generated password for each of your accounts - the nice thing about KeepassX is you can also (and should) set the passwords to "expire" after a certain time (set it to 1 month or less right now, especially if your site has been hacked or you found malware on your computer). The program will remind you to change the password but it will not change it for you.

Please be sure you have followed the guide: how to respond to the Wordpress attacks if you have any Wordpress sites

Peter Stolmar is a Linux Systems Administrator specializing in system security including fixing hacked websites, defending against large scale attacks, and educating users on the importance of "thinking secure".

Need help with securing your site(s), responding to a security incident, or custom Wordpress development? Call A Developer » 1-800-926-6167

23 comments:

  1.  Thanks a lot for the information.......this was really helpful.
    Wordpress Development Company

    ReplyDelete
  2. Thank you sharing this information thank you.Come back again for more interesting stuffs like one you got earlier! Bulk SMS in India

    ReplyDelete
  3. Thanks so much for this helpful information come back again for more interesting information…Keep it up
    Builders in Agra

    ReplyDelete
  4. Interesting information I haven’t been through such information in a long time
    Wordpress Developer

    ReplyDelete
  5. This comment has been removed by the author.

    ReplyDelete




  6. Thank you. I just wanted to know where to ship it since I know now to keep producing it



    WordPress Development India

    ReplyDelete
  7. Hey nice blog,Thank's for this helpful information come back again for more interesting information…Keep it up!
    Taxi in Agra

    ReplyDelete
  8. Hi, Thanks for sharing such a wonderful piece of information. I must say that while reading your post I found my thoughts in agreement with the topic and find wordpress development
    hire wordpress developers
    hire drupal developers
    wordpress web development
    drupal web development

    ReplyDelete
  9. Thanks for sharing this blog and actualy this is very informative Wordpress Blog

    ReplyDelete
  10. We could easily create the normal Static Websites with the help of Wordpress CMS development platform and could make more attractive things.
    Web Development Company | Web Design Company

    ReplyDelete
  11. Fantastic factors completely, you generally won a clean viewers. What could you recommend in regards to your launch that you just designed some periods ago?

    Website development in Bangalore | website design services Bangalore

    ReplyDelete
  12. This comment has been removed by the author.

    ReplyDelete
  13. Really nice information here. I am expecting more information from you.

    SEO Company in Chennai

    ReplyDelete
  14. People know what it's like to face the challenge of cleaning a messy bedroom. Sometimes, it can feel like you're about to climb Mount Everest when all you're really doing is putting some clothes and books away. Luckily, it doesn't have to be as hard as scaling the tallest peak. Follow these simple steps to make cleaning your room a walk in the park rather than a mountain climbing race. شركة مكافحة حشرات بجدة شركة مكافحة النمل الابيض بجدة شركة كشف تسربات المياه بجدة شركة تسليك مجارى بجدة شركة مكافحة حشرات بالاحساء شركة مكافحة النمل الابيض بالاحساء شركة كشف تسربات المياه بالاحساء

    ReplyDelete
  15. People know what it's like to face the challenge of cleaning a messy bedroom. Sometimes, it can feel like you're about to climb Mount Everest when all you're really doing is putting some clothes and books away. Luckily, it doesn't have to be as hard as scaling the tallest peak. Follow these simple steps to make cleaning your room a walk in the park rather than a mountain climbing race. شركة مكافحة حشرات بجدة شركة مكافحة النمل الابيض بجدة شركة كشف تسربات المياه بجدة شركة تسليك مجارى بجدة شركة مكافحة حشرات بالاحساء شركة مكافحة النمل الابيض بالاحساء شركة كشف تسربات المياه بالاحساء

    ReplyDelete
  16. Plan out when you will take a break. Taking a break to eat, drink, and kick up your heels is often a good idea. However, don’t let yourself become too distracted during your break! Plan out a chosen amount of time that you will take a break for. It is best to take a break after you have completed an entire task rather than in the middle of it. One example could be that you plan to take a break after you have cleaned out under your bed and before you start organizing the smaller things in your room.
    • Don't take a break if the time of your break comes around and you feel as though you're on a roll. Use that feeling of being on a roll to get even more done!
    شركة تنظيف خزانات بالرياض شركة عزل خزانات بالرياض شركة عزل اسطح بالرياض شركة نقل عفش بالرياض شركة نقل اثاث بالرياض شركة تسليك مجارى بالرياض

    ReplyDelete
  17. Great post. Keep it up. Thanks for advice. It is wonderful information for me. Please visit
    Website Development Company Bangalore

    ReplyDelete
  18. Great site for these post and i am seeing the most of contents have useful for my Carrier.Thanks to such a useful information.Any information are commands like to share him.

    Digital Marketing Course in Chennai

    ReplyDelete
  19. Thank you for posting such nice article read. I am very glad to read this. Really good one.
    Bangalore Web Designing Company, UI Designing Company Bangalore

    ReplyDelete
  20. I am very happy when read this blog post because blog post written in good manner and write on good topic. Thanks for sharing valuable information.
    UI Design Companies in Bangalore, Web Application Development Companies in Bangalore

    ReplyDelete
  21. I think like I get a clear cut understanding while reading the content than anywhere else. Keep continuing this journey...!

    Pawn Shops in Montgomery

    Pawn Shops in Birmingham

    Pawn Shops in Mobile

    ReplyDelete