Nearly 400,000 WordPress credentials stolen

Security Magazine's December 2024 press article reports that threat actor MUT-1244 stole more than 390,000 WordPress credentials in a year-long campaign. Casey Ellis, founder and advisor at Bugcrowd, is quoted saying that targeting red-teamers and researchers with fake proof-of-concept code is an old troll tactic that can also work as an effective watering-hole approach.