Wordpress sites exploited with "clever black hat SEO trick"

Advertise on BHW
That said, it's suspected to be a case of brute-forcing the WordPress administrator accounts
Click to expand...

So many times it boils down to this. And yet it's so easy to install some sort of firewall or 2FA with WP. Weak password + unsecured login system = webmaster willingly bending over
 
Steptoe said:
So many times it boils down to this. And yet it's so easy to install some sort of firewall or 2FA with WP. Weak password + unsecured login system = webmaster willingly bending over
Click to expand...

Also plugins and themes. People install anything but forget that it's all active PHP code that can do anything on the server. I've seen WP installations with dozens of plugins. It's insane.
 
Unfortunately, most people are lazy and that's the reason they went for Worpress in the first place. I've seen sites with 30+ plugins installed and when I pointed this out to the webmasters, they weren't bothered at all. Lots of people learn the hard way when their site gets compromised.
 
Steptoe said:
So many times it boils down to this. And yet it's so easy to install some sort of firewall or 2FA with WP. Weak password + unsecured login system = webmaster willingly bending over
Click to expand...
Could be that..
I'm certain it's good ol botnet

Wordpress has little to no security by default
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top