Brute Force Attacks Build Word Press Botnet
Summary: Attackers are running distributed brute-force password-guessing campaigns against WordPress installations, trying roughly 1,000 common username and password combinations to break into administrative consoles. HostGator counted over 90,000 IP addresses involved, and Incapsula reported that compromised sites are seeded with backdoors that persist even after the owner changes the password.
Key Takeaway: The targets are web servers with effectively unlimited bandwidth, not home PCs, so a botnet built from them can generate far more attack traffic than the Brobot-style networks of hijacked desktops used against US financial institutions in 2012.
Read the original at Krebs on Security ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026