TechCrunch Hacked by OurMine, Attackers Target Weak Passwords

[php_art]

TechCrunch Hacked by OurMine, Attackers Target Weak Passwords





TechCrunch is the latest victim in OurMine’s summer hacking rampage. The site, which is powered by WordPress and hosted via WordPress.com VIP, was hacked this morning and defaced with a message from the attackers who identify themselves as an “elite hacker group.”

TechCrunch’s news ticker was updated to display: “Hello guys it’s OurMine Team, we are just testing TechCrunch Security, don’t worry we never change your passwords. Please contact us.” OurMine gained access to a contributor account and posted a similar message.


According to a report from Engadget, TechCrunch’s sister site, the hackers gained access via a contributor’s weak password, not by exploiting a vulnerability in WordPress or the site’s plugins. TechCrunch was able to regain control of the site within minutes and delete the content created by the attackers in the admin.


Read more : http://bit.ly/2bh4Czv

[Pegasus]

Well, it's good to know that the problem is the security of a contributor and not a problem with WP. I have relatively strong passwords on my WP sites, as do the contributors, but there's always the worry...