Thousands of WordPress Sites Hacked To Push Work From Home Scam | WordPress and Annotum for Education, Science,Journal Publishing | Scoop.it
It appears that the scammers had added new pages with randomly-generated filenames inside the /wp-includes/ directory on the sites.

 

Read more, a MUST:

http://www.securityweek.com/thousands-wordpress-sites-hacked-push-work-home-scam?utm_source=dlvr.it&utm_medium=twitter