Articles

Website hacking attempts on rise in lockdown period. Stay home and stay protected

Website hacking attempts on rise in lockdown period. Stay home and stay protected 

Dear abcaus users,

Website hacking attempts on rise in lockdown period

Stay home and stay protected but Covid-19 is not the only thing you should be worried about.

Amidst the lockdown, many of you will be working from home and so do the hackers. As per leading wordpress security service provider, over last 30 days, hacking attempts worldwide touched a new height of 251 million attempts on May 12th, 2020 from 191 million on May 11th, 2020.

You will be perhaps surprised to note that India tops the list of countries by number of attacks.

The above said attacks statistics were related to the attacks to gain access to the website that are hosted on wordpress. Today, most of the websites that need a Content Management System (CMS) uses WordPress.

According to my Firewall summary, majority of the attacks recorded on abcaus.in were “brute force” attempts.

A brute force attack is an attempt to crack a password or username using a trial and error approach and hoping, eventually, to guess the password/ username correctly. Though old, it is still popular with hackers. Even automated tools are also available to help with brute-force attacks.

Depending on the length and complexity of the password, cracking it can take few seconds to many years. Some hackers even target the same systems every day for months and sometimes even years.  

It is advisable that a user should choose 10-character passwords that include symbols or numerals. Such password would create 171.3 quintillion permutations/combinations. Using a processor that tries 10.3 billion hashes per second, cracking such password would take approximately 526 years.

Users should choose complex passphrases rather than single words. It’s important to avoid the most common passwords and to change them frequently. Users may also use password generation tools for creating complex passwords.

I would strongly recommend installing Wordfence Security Plugin for wordpress. It blocks an IP based on the user defined number of attacks

Stay home, stay protected.

– CA Ashutosh Lohani

Share

Recent Posts

  • Prevention of Corruption Act

CBDT Instruction can not absolve persons to explain source of gold within limits specified – SC

Mere CBDT Instructions cannot absolve individuals of their obligation to explain the source and nature of their gold holdings, even…

11 hours ago
  • ICSI

Empanelment of General Observers for ICSI Examinations December 2026. Last date 16.11.2026

Empanelment of General Observers for ICSI Examinations December 2026 ICSI has invited interested members to enroll as General Observers for…

2 days ago
  • Income Tax

ITAT address some important issues relating to deduction u/s 80IA

ITAT answers some important and inter-related issues relating to deduction u/s 80IA In a recent judgment, ITAT has dealt with…

2 days ago
  • Income Tax

Mere carry forward of loss can not be denied for belated return – ITAT

Carry forward of loss can not be denied for belated return, it is only the set off in subsequent year…

2 weeks ago
  • Income Tax

Sales duly recorded in books & VAT returns, can’t be held bogus without cogent adverse material

Where sales are duly recorded in books and VAT returns, to treat it bogus sales, AO must bringing cogent adverse…

2 weeks ago
  • Income Tax

ITAT allows Diwali expenses incurred by assessee as business expenses

Expenses to celebrate Diwali with staff creates a goodwill and, therefore amounts to expenses incurred for the purpose of business…

2 weeks ago