I Got Hacked and That Made Me Move
Friday night, I was headed for bed. I brought up my RSS feeds in NewsBlur and noticed six new posts on this blog. About gambling. All six copypastas of an advertisement of some gambling site. These articles jolted me from near-sleep to wide awake, and I bolted to my home office. And I thought, “How am I even important enough to hack?”
After logging in to my hosting service, I changed my account password. Then I deleted the posts from WordPress. Note: I run my own copy of WordPress on my hosting service. And then started forensics. I found a new WordPress admin. Delete. I found a bunch of new FTP accounts. Delete. I was already at the latest WordPress version, but on an older PHP version. Upgrade. Crisis averted, maybe? I started poking around the file system, and found some suspicious files in wp-content:



