Yamato

So, I have this old site on WordPress, and it has all updates installed, so it’s fully patched. Out of the blue, I started getting emails about new users registering and then requesting lost passwords. All of them are coming from the usual suspects—Bangladesh, India, Indonesia, Cambodia, Brazil, etc. The emails they’re registering with look legit and mostly corporate. What’s going on?

__________________