While the email I received about this email attack appeared “phishy,” –that is, it had no formatting, did not look official, and had misspelled words and bad grammar–it seems that it is for real.

For those of us who have a wordpress blog that lives on a site outside of wordpress–your own website, or domain (web address) other than wordpress.com– there seems to have been people out there who can hack into our dashboard and create problems.

Here are some details from wordpress on how to know if you’ve been hacked and what you need to do.

I did have a user added to my dashboard that I did not know but have not found any other evidence that I have to go though the steps to clean all of my postings and photos.

It’s best that you go ahead and do the upgrade NOW, and while you’re in the administrative mode, change to a stronger password too!