David at “Pack a Camera” warned about Wordpress spammers. Other bloggers have also sounded the alert about these hackers/spammers.

The following subscribers showed up on this blog also:

Username: MikeWink
E-mail: bugbeemershonyhe@gmail.com

Username: Andrianq
E-mail: pulvillarrac@gmail.com

I also found another curious uninvited subscriber named Heribertolsom85. What was curious? The subscriber does not show up when I go to the “User” pane. When I click “User” I see this subscriber for a fraction of a second and then he disappears!! This hacker has managed to list himself as “Administrator”. The Administrator tab says there are 2 administrators (in fact this is what alerted me, before I noticed the disappearing act above).

I kept clicking on Administrator/User several times and then quickly tried to click on the name of the interloper before it disappeared. After several attempts I managed to click on “Heribertolsom85″ before he disappeared and that led me to the “Edit User” page for Heribertolsom85.

Heribertolsom85 entered some php code for the “First name” field.  I am not familiar with php but from cursory examination I suspect this code is what kept his name from appearing when I listed users.

Code

After I removed the php code above Heribertolsom85 appeared along with other users.