Daily

Decoded what the attackers planted, wrote alt text for 103 images, and started a guide to moving to Hugo.

DNS moved to Cloudflare, mail kept working, and samarthya.me now serves the new site over HTTPS.

137 posts moved to a static Hugo site, 126 images recovered from an old backup, old links kept alive.

Exported the content from the broken site and started sorting what could be recovered.

The first full database dump: every one of my posts now belonged to an account registered in 1970.

The old WordPress site was compromised. Taking it offline was the first step.

A fake administrator, 20 plugins switched off in one second, and a hidden loader planted to stay.

21 successful logins, and the first of 55 spam posts published on my blog.

The first successful logins of the break-in. My reused password had found its way to the wrong people.

165 wrong passwords in one day. The busiest day for password guessing the old blog ever logged.