The #WPSetup Attack: New Campaign Targets Fresh #WordPress Installs – includes info on how to avoid problem www.wordfence.com/blog/2017/07/wpsetup-attack/