Anti-Phishing Working Group (APWG) report: Phishing attack campaigns shattered all previous years records. The number of phishing attacks peaked at 158,988 in the month of April 2016, a large number of attacks that keeps growing year over year. Once hijacked, the same site can be used to serve malware. The sheer quantity of WordPress-based sites makes them natural targets for spammers and cybercriminals. WordPress introduced automatic updates in October 2013 as it released version 3.7.3, adding further fixes and security to existing distribution.”]