Wordpress Exploit ... Heads Up For BHW Members

[jammie]

I know a few people here use wordpress.

Currently theres a bot net targetting the default admin user ("admin") and attempting to brute force the password. 90,000 IPs have been targetted and have been detected on HostGator amongst others.

Readmore:

http://phys.org/news/2013-04-admin-password-wordpress.html

 

[hackgen]

Thank you for informations bro

 

[ilovestocks]

People really need to get rid of that admin username. Recently I saw someone trying that on mine but luckily I had changed it long before. I got that plugin wp better security(I think that's the name), and it shows you a log of people trying to sign in.

 

[IamNRE]

People really need to get rid of that admin username. Recently I saw someone trying that on mine but luckily I had changed it long before. I got that plugin wp better security(I think that's the name), and it shows you a log of people trying to sign in.

How do I change the username?

I can't delete the admin profile and I can't change the admin username.

 

[WPRipper]

"The attacker is brute force attacking the WordPress administrative portals, using the username 'admin' and trying thousands of passwords."

Solution is simple as you can see.

 

[blackhaterz]

You can change username in phpmyadmin.
I also have a great ddos script i try it on my every WP site using ninja security and CDN high security but the script is damn good it breaks every security so i think stay away from WP. now i started making sites in html and some rare scripts.

 

[Junkfood00]

How do I change the username?

I can't delete the admin profile and I can't change the admin username.

Deleting and assigning and more is just bunch of headache. Just go ahead right into the database, using any tool such as phpmyadmin and change the username in the wp_users table.

You just learned how to do something 1000s of people don't know, so just email everybody, linking to the news page, and make money by offering admin name change.

 

[T2tkid]

How do I change the username?I can't delete the admin profile and I can't change the admin username.

It is very very easy to change the 'admin' to any other name using the better wordpress security plugin

 

[Giederius]

Damn... I can't log into dashboard. it says
[h=1]Error establishing a database connection[/h]I hope everything is ok ;x

 

[IamNRE]

It is very very easy to change the 'admin' to any other name using the better wordpress security plugin

Nice share... really user friendly plugin! My site is now much safer IMO.

Thanks

 

[neutralhatter]

for your protection, 10000 most commonly used passwords (don't use them !)
http://xato.net/passwords/more-top-worst-passwords/

 

[ShadeDream]

How is this an exploit? Misleading title. lol

 

[capripio]

Its look like a lots of work for me I hope there should be bot for this aswell

 

[ShadeDream]

Its look like a lots of work for me I hope there should be bot for this aswell

It's easier than you think and I'd rather do it through phpMyAdmin than through a plugin.

http://www.wpbeginner.com/wp-tutorials/how-to-change-your-wordpress-username/

 

[magguy]

Great topic. My ISP took me off line after detecting the attack. It spiked the CPU on the server. They suggested adding lines to the .htaccess to lock down the wp admin pages to set IP. Is this a good fix? Changing the admin name is good (something I already did) but will not stop the attempted logins and the server spike.

 

[capripio]

It's easier than you think and I'd rather do it through phpMyAdmin than through a plugin.

http://www.wpbeginner.com/wp-tutorials/how-to-change-your-wordpress-username/

Lol bro I have design many themes of wp for clients. And I know about tweak with mysql to change stuff. But seriously atm I am lazy as hell!

 

[ShadeDream]

Great topic. My ISP took me off line after detecting the attack. It spiked the CPU on the server. They suggested adding lines to the .htaccess to lock down the wp admin pages to set IP. Is this a good fix? Changing the admin name is good (something I already did) but will not stop the attempted logins and the server spike.

Sounds like a good fix to me but I'm not entirely sure. You'll probably still get hits, though that depends on what the bot is doing. Redirect all IP's but your one to somewhere else, like Google or something. It sounds like the guys at your ISP know what they are talking about.

 

[AnotherOne]

This is the very reason why all the old users of WordPress don't use "admin" as username. I think this is the second security tip besides using a custom "db and table name".

 

[capripio]

BTW I have noticed that, Our posts show username on posts as author it can taken as bad for our site too!

 

[N1ckG2]

Keep the admin username, set up an easy to guess pass like 123 or so, then make it a regular user (not admin privileges) so bots are happy to login but cant do much with your site.

Last time (almost an year ago) my sites hosted on different hosting were all hacked. Lucky i had backups and restored everything (took me a few days). Now i use completely new hosting providers, have backups and am waiting to see what's going on. I do believe top hosting providers (not the cheap one you pay $1/mo) should protect us.