Massive Botnet Chews Through 20,000 WordPress Sites

WordPress users are facing another security worry following the discovery of a massive botnet. Attackers have infected 20,000 WordPress sites by brute-forcing administrator usernames and passwords. They are then using those sites to infect even more WordPress installations.

https://nakedsecurity.sophos.com/2018/12/10/massive-botnet-chews-through-20000-wordpress-sites/