Hackers Testing Credit Card Numbers
-
I installed wordfence and purchased premium because I was receiving fake Woocommerce orders that were testing tens of thousands of credit card numbers. I had installed recaptcha for Woocommerce, but disabled it and installed Wordfence because I thought it provided a better solution. I just received thousands of payment attempts in the last 2 hours. I deactivated my credit card payment plugin (PAYA) as a last resort. I get charged approx. $.25 for each gateway transaction, including these declines, so I’m looking at $2500 in processor fees when 10,000 attempts are made.
The recapcha option in Wordfence shows the following message: We’ve detected that you’re using WooCommerce. reCAPTCHA support is currently incompatible with the WooCommerce login page and should not be enabled. I’m going to submit a support ticket with Woocommerce for this problem as well, but what is Wordfence’s protection against this type of attack?
Is it looking at the customer’s ip? The latest ‘order’ was from a single ip and spent 2 hours trying different credit card numbers, all of which were declined. Please let me know what information I can provide to assist. I’ve read different things about whether or not to enable guest checkout. Is there a specific recommendation on whether to disable guest checkout? Thank you.
- The topic ‘Hackers Testing Credit Card Numbers’ is closed to new replies.