Frickin' script kiddie hackers whatever [View all]

My wife couldn't log into her site today (she runs a WordPress site) and it just took a visit to the main page to figure out she'd been hacked last night. Luckily it was just WordPress itself and not the whole thing, so it took me just a couple of minutes to throw up a "site down for maintenance" message instead of the hack crap. Took a bit longer to restore the whole thing, since it hadn't been backed up (mea culpa - originally she was just doing it on the side and I forgot about it).

Supposedly it was the "Bangladesh Cyber Army" but emails led to Israel and names and membership led to Arab states and the whole thing supposedly is in retaliation for policies of India, so who the hell knows (and, FWIW, her site has NOTHING to do with any of that).

I got into the DB and restored the passwords, restored the root index.php which was obviously trashed, then it took me a bit longer to figure out what else they had actually mucked with (basically another index file and the 404 page), but since I don't usually use WordPress it took more of my time than I wanted.

Anywayz, she's back online, and I'm just a few hours shorter in my day. Pain in the ass, and it was a cheap hack job too (but thankfully for me). People with nothing else better to do (them, not me). And, anyway, the site is now backed up and I'm hardening access to it. Even frickin' side projects chew up time.