It should be as easy as linking a malware sample, no? I think the spam you’re referring to is usually targeting the “Website” field of Wordpress comments, whic

It should be as easy as linking a malware sample, no? I think the spam you’re referring to is usually targeting the “Website” field of Wordpress comments, which turns the username of the commenter into a hyperlink.