Hacker Demanded iPhone After Molesting My WordPress Site (…and What I Did)

(what the hacking dude told me... damn)
"That son of a b*tch!"

Forgive my French, but that was all I could say when a dude hacked this very site you’re reading

It was one ordinary day - August 20’ish of 2013

I woke up, connected to the internet… and boom!

Somebody molested my website, making it look like this:
(there are a couple more "defacements", but these are the screenshots I was able to get)
Of course I was shocked! I did not know what to do

My eldest daughter was just about 2mos old at that time…

…a time when I was cranky from having less sleep because of the baby

I wanted to find a solution online but I did not know where to start – I’m a nurse for crying out loud

Anyway, after hours and hours of snooping around, I was able to trace the guy who “I suspect” hacked me, at Facebook

(I can’t remember how I did it – but my guess is, I just searched for the name he left in front of my website… no heavy science or IT shit)

So, I contacted him, and the conversation went something like this (notice the time stamps):
(ok, I know... that was a pathetic conversation starter hahaha)
By that time, I was able to figure out how to at least get the “defacement” off my site...

(trust me, it took a lot of time – research, trial and error, PAIN)

BUT… it was a back and forth battle

I would fix it, then the “defacement” comes back again within a day

It was a nightmare, as I was doing the fix manually

He hasn't answered back yet

It continued a few days more until I contacted him again:
And we conversed some more...
And at 2:28am of August 29...

All I could reply to end our conversation was:
But of course… Hurricane Dexter would NOT give up without a fight

(…I could just imagine now how exhausted I was at that time)

We continued the back and forth “fix-deface” cat and mouse run… and he even got some of this hacking friends to tag along
(only screen shot I could recover, but I'm sure there were more of them)
My wife could only laugh and describe those guys as bullies...

(yep… online bullies, bullying me… but I got to hand it to them, they got brilliant minds lol)

After a few days, I felt we were going nowhere – so I decided to pull the plug

I transferred my website to another host

I just salvaged parts of my site that I could, and then moved on

One thing for certain:
I do not wish to get hacked again

And I don’t want my clients or friends to get hacked either

From there, I’ve been more particular about...

WordPress website security – at least, the very basics like:

#1. Do NOT use “admin” as a login username and have a stronger password (combination of lower and upper case letters + numbers + symbols)

#2. Keep your plugins and themes updated

#3. Host your site on a good one (here’s an affiliate link to one of the hosts I use: http://imgrowbox.com/tunedhosting)

#4. Keep regular backups of your site (there are free WordPress plugins for those – I use UpdraftPlus)

#5. Use security plugins – I used the free one called “WordFence” and it has kept me safe ‘till now


Recently though, I heard that some of the top security plugins (even my favourite WordFence) failed to protect a “test-site” from an exploit
Luckily, another plugin came out that solves those extra WordPress security problems...

It’s a paid one though, and you can find it here: http://imgrowhouse.com/siteguardian

(Yes, I bought it and installed it on my sites... and yes, I suggest you do the same)

Thank you for your continued support to my blog by getting it thru my affiliate link here

I wish you learned from this post, and most importantly, a safe site to you

Cheers!
from way up high
Philippines’ City of Pines
Hey there buddy, care to share what's on your mind?

Share this article

Comments

Leave a comment

Your email address will not be published. Required fields are marked *

Shares
[wpob id="1"]