12,000 WordPress installations were compromised in February and used in Phishing campaigns that targeted Apple customers and PayPal users. More than 7 percent of all Phishing attacks blocked by Netcraft during the month were hosted on compromised WordPress domains. In 2012, poorly protected WordPress installs were blamed for the spread of the Flashback Trojan. Even developers and active administrators can inadvertently expose WordPress-based projects to malicious acts, such as those who expose database backups to Google indexing. Last week EA, one of the world’s largest gaming companies, had one of their servers compromised and two of their domains used to initiate a Phishing attack against Apple customers.”]

