Board Thread:Attention people/@comment-8-20150516040516/@comment-8-20150517020128

Okay, looks like things are getting clearer.

Again, there is no "hacking" going on here. What we have here is "phishing". That means fooling people into sharing their passwords - in this case with a fake form on another site.

I have reported the phishing site to wix.com. Phishing is illegal, they will no doubt close the site and decide whether to take it further.

So we have at least two people stealing passwords, and several people who put their Wikia password into a fake form on another site.

All that's happened, including the changes on the Wiki Activity page and elsewhere are explained by this - admins can change interface pages, and that's what was done here.

As this has got more serious, the two people known to be involved will be banned from Wikia. They have broken the Terms of Use in several ways and are not welcome on Wikia any more. To be clear that means the people behind the keyboard, not just the account. They are not welcome using any account or while logged out.

For the rest of you, please check that your passwords are changed if there is any possibility they were stolen (and if you don't think so, change them anyway!). Also, be sure they are not guessable, and that they are different from the passwords you use on other sites. I use a password manager to help with this (LastPass), there are lots available and I urge you to try them out.

Be careful with your security people. This is a lesson in being careful, and not trusting people too easily. Especially those that say "it was all someone else's fault" as soon as they are caught!