3 ms·
Dismissing these as script kiddie attempts is no longer correct. This is a real industry now. It’s not like the large scale actors are going to pass up a vali
by hamburglar 5mo ago
Dismissing these as script kiddie attempts is no longer correct. This is a real industry now. It’s not like the large scale actors are going to pass up a valid unpatched vector just because it’s old hat.
- dylan604 5mo agoyes, but how often otherwise would i get to use the word skiddie?
- nubinetwork 5mo agoThey're skiddies if they're trying WordPress attacks on domains that have never hosted anything remotely close to a CMS before...
- mhitza 5mo agoImagine this; ~40% of public websites run wordpress. (based on some AI-gen summary, even if fewer it is still an important percentage). So you might be spinning up a new instance with 40% probability. It makes sense in mass vulnerability explotation and detection to aim for highest success rate first. Especially when the IPv4 space is so easy to scan nowadays. And you have services like Shodan that do just that daily.