Thousands of WordPress Sites Hacked To Push Work From Home Scam | ICT Security-Sécurité PC et Internet | Scoop.it
It appears that the scammers had added new pages with randomly-generated filenames inside the /wp-includes/ directory on the sites.

 

Read more, a MUST:

http://www.securityweek.com/thousands-wordpress-sites-hacked-push-work-home-scam?utm_source=dlvr.it&utm_medium=twitter