Heads up on your recent gmail article – site now hacked

Hi there

Last week I installed the updraft plus backup plugin on one of the sites I manage. I set it to automatically backup to a google drive account. This required that I set up a gmail account for the site…. I WISH I had seen your article about the gmail hacks first! The site has now been hacked and I’m convinced it’s because of adding the gmail connection (API) to the plugin.

The reason I’m posting this in the WordFence forum is firstly to thank you for all the effort you put into keeping our sites safe – even going beyond the call of your plugin, and secondly to clarify why I would have received an email stating that a request for a new password had been sent, giving the email address of the ‘hacker’ who had requested the password and to which the new one had been sent – an email address that is not registered on the site or related to any of my mail contacts?

Being a non-techie, my quick fix is to restore an old backup and work from there, and to find another solution for scheduled backups.

All the best
Colleen