The WordPress mailing lists have been rather active discussing it.<br><br>A couple of hardening tips if you're running WP, or run a host providing it:<br><br><a href="http://ma.tt/2013/04/passwords-and-brute-force/">http://ma.tt/2013/04/passwords-and-brute-force/</a><br>
<a href="http://codex.wordpress.org/Brute_Force_Attacks">http://codex.wordpress.org/Brute_Force_Attacks</a><br><br><div class="gmail_quote"><br><br>On Fri, Apr 12, 2013 at 11:02 PM, Jay Ashworth <span dir="ltr"><<a href="mailto:jra@baylink.com" target="_blank">jra@baylink.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">FYI. Am I the only person just hearing about this?<br>
<br>
----- Forwarded Message -----<br>
> From: "PRIVACY Forum mailing list" <<a href="mailto:privacy@vortex.com">privacy@vortex.com</a>><br>
<br>
> Huge attack on WordPress sites could spawn never-before-seen super<br>
> botnet<br>
><br>
> <a href="http://j.mp/ZRZksL" target="_blank">http://j.mp/ZRZksL</a> (ars technica)<br>
><br>
> "The unknown people behind the highly distributed attack are using<br>
> more<br>
> than 90,000 IP addresses to brute-force crack administrative<br>
> credentials of vulnerable WordPress systems, researchers from at least<br>
> three Web hosting services reported. At least one company warned that<br>
> the attackers may be in the process of building a "botnet" of infected<br>
> computers that's vastly stronger and more destructive than those<br>
> available today. That's because the servers have bandwidth connections<br>
> that that are typically tens, hundreds, or even thousands of times<br>
> faster than botnets made of infected machines in homes and small<br>
> businesses."<br>
><br>
> - - -<br>
><br>
> Up in the Net! It's a bug! It's a phish! It's SUPER-botnet!<br>
><br>
> --Lauren--<br>
> Lauren Weinstein (<a href="mailto:lauren@vortex.com">lauren@vortex.com</a>): <a href="http://www.vortex.com/lauren" target="_blank">http://www.vortex.com/lauren</a><br>
> Co-Founder: People For Internet Responsibility:<br>
> <a href="http://www.pfir.org/pfir-info" target="_blank">http://www.pfir.org/pfir-info</a><br>
> Founder:<br>
> - Network Neutrality Squad: <a href="http://www.nnsquad.org" target="_blank">http://www.nnsquad.org</a><br>
> - PRIVACY Forum: <a href="http://www.vortex.com/privacy-info" target="_blank">http://www.vortex.com/privacy-info</a><br>
> - Data Wisdom Explorers League: <a href="http://www.dwel.org" target="_blank">http://www.dwel.org</a><br>
> - Global Coalition for Transparent Internet Performance:<br>
> <a href="http://www.gctip.org" target="_blank">http://www.gctip.org</a><br>
> Member: ACM Committee on Computers and Public Policy<br>
> Lauren's Blog: <a href="http://lauren.vortex.com" target="_blank">http://lauren.vortex.com</a><br>
> Google+: <a href="http://vortex.com/g+lauren" target="_blank">http://vortex.com/g+lauren</a> / Twitter:<br>
> <a href="http://vortex.com/t-lauren" target="_blank">http://vortex.com/t-lauren</a><br>
> Tel: <a href="tel:%2B1%20%28818%29%20225-2800" value="+18182252800">+1 (818) 225-2800</a> / Skype: <a href="http://vortex.com" target="_blank">vortex.com</a><br>
><br>
> _______________________________________________<br>
> privacy mailing list<br>
> <a href="http://lists.vortex.com/mailman/listinfo/privacy" target="_blank">http://lists.vortex.com/mailman/listinfo/privacy</a><br>
<span class="HOEnZb"><font color="#888888"><br>
--<br>
Jay R. Ashworth Baylink <a href="mailto:jra@baylink.com">jra@baylink.com</a><br>
Designer The Things I Think RFC 2100<br>
Ashworth & Associates <a href="http://baylink.pitas.com" target="_blank">http://baylink.pitas.com</a> 2000 Land Rover DII<br>
St Petersburg FL USA #natog <a href="tel:%2B1%20727%20647%201274" value="+17276471274">+1 727 647 1274</a><br>
<br>
</font></span></blockquote></div><br>