Hacked: Strange WP Admin Login. What do I do?

ppl here mentiond that people hack wp to insert backlinks (like how .edu links are done)

make sure there are no "weird" backlinks to vagin@s.

change the database prefix,
https://wordpress.org/plugins/db-prefix-change/

i make sure the login page is only accessible by me via htaccess. i also disabled all of the blog's config files since hackers target them. see below:

1. Hacker ISP: .rev.poneytelecom.eu

2. File attacked: blog/wp-admin/setup-config.php

Great suggestions, thanks everyone! I wouldn't think of all these things on my own. 36 hours later the site appears to work just fine, but yes I was worried about them injecting links somewhere.

JustUs said:

You probably do not want to do that, in spite of the hoopla behind it. The Posesta emails were gotten through knowing the telephone number of Podesta, contacting and social engineering the telco, and taking over the email.

Click to expand...

i found this article about that topic...

---

John Podesta didn't have his email "hacked," he fell for a phishing scam.

Podesta had a Gmail account. Gmail's servers were at no point hacked into or compromised. Podesta's password was not guessed in some sort of brute force attack. He clicked a shady bit.ly link sent to him in an email and then typed his password into a phishing site.

According to these reports, Podesta actually clicked the "Change Password" link on "com-securitysettingpage.tk" and gave these scammers his password.

A url took him to a fake login page on "com-securitysettingpage.tk" saying "someone has your password."

"Someone just used your password to try to sign in to your Google account," the phishing email said. "Google stopped this sign-in attempt. You should change your password immediately."

This is "grandma's first day on the internet" level idiocy.

http://www.upi.com/Top_News/US/2016...sians-security-researchers-say/5351476986068/