I’m starting to think this problem goes back before yesterday. It was on Saturday that I originally noticed that my web site at lotusmedia.org was messed up. It’s a WordPress site and it was failing to connect to the database.
I tried updating the WP software from my Dreamhost control panel, as this sometimes straightens things out, but it made no difference. Dreamhost is the server for my website, but it’s also the domain name server for lotusmedia.org and several other domains that I own.
I can’t log in to Dreamhost now, but I did verify that the domain name registration hasn’t changed at least. I’m wondering if the hackers have accessed my firstname.lastname@example.org address, which currently goes right into my Gmail account. I’m still getting messages sent to that address, but maybe they are too!