Database update of yoursite.com

[TheMarquis]

This morning I received an e-mail that the database of one of the sites I own has been updated. From the first moment I found it strange, because I usually get the notification directly in the dashboard, and an e-mail is not (necessarily) necessary.

I go to the inbox, see the message and hoover the link that (apparently) redirected to the site, when:
Surprise! Redirect to a hack:



The link source of the hack, masked under my site's wp-login's link:



The sender's e-mail was also masked as from WordPress, but when I hovered, it came from a John Doe's regular e-mail.

Guard your sites and data. Be very careful when and what kind of links you click on.

Cheers!
M

 

[Dopious]

Welcome to the club, thanks for clicking.

 

[TheMarquis]

Welcome to the club, thanks for clicking.

I did not clicked it, ser. I'm too old for this sheet. I wanted to point out that these hackers are very creative. The site, but especially the e-mail, is new, so it wasn't something automated (example: a bot scanned the site, retrieved the e-mail, and did its job).

 

[Dopious]

I did not clicked it

Please retry ser, a must to be accepted in to our exclusive and privileged club, refreshments are included ser.

 

[TheMarquis]

Please retry ser, a must to be accepted in to our exclusive and privileged club, refreshments are included ser.

Yes, deer ser, refreshments will be included. Pay now and benefit later! Welcome to my club! That's the best choice you made today!
Grats & Grats!

 

[Thunder Digitals]

Didn't you have installed security plugins on your WP website? Or if you had already then what was the plugin name? Because you need to change that.

 

[TheMarquis]

Didn't you have installed security plugins on your WP website? Or if you had already then what was the plugin name? Because you need to change that.

There is no issue with my site at all (I handle my stuff since many years before). This thread is about an e-mail with a hack attempt, and I wanted to let people know they should be very careful when they click on these kinds of links, because it's dangerous.

 

[Builder Dave]

It's physhing targeted at WordPress site owners. As many regular non-techy folk are running WordPress websites, I'm sure they have a decent success rate.