Security Update for EcoCounts

Dear Volunteers and Participants,

we are writing to inform you of details of the breach of the EcoCounts website which has kept us offline for the past week. 

Attackers were able to gain access through a scripted attack to the core of the website and insert various scripts and files. However we luckily caught this as it was happening and managed to lock down the website without any damage or loss of data. The attack is referred to as wp2shell.

Because of the scripted nature of the attack which meant it occurred en masse across many websites, it took our hosting provider a full week to restore full security - all at their own cost for which we are highly grateful.

We apologise for any inconvenience.

Best regards

EcoCounts

Chat Links:

• Chat group on Signal here  
  

Are you getting the right emails from us?

• This is the Volunteers & Participants mail-out, roughly weekly

• Sign up to the others here, including:

• Weekly ecotips
• Monthly newsletter
• If you are doing your carbon footprint, we also email you about that, but it's not a public list you can subscribe or unsubscribe on - email by reply to this email for queries related to your data. 

unsubscribe‍