Comment by xyst
9 hours ago
So if I wanted to build a botnet, then it would be very easy ;).
Infiltrate vulnerable PHP sites. Install backdoor(s). Secure root access. Patch PHP to lock out script kiddies. Let it sit dormant until you need to launch attack
Indeed this is undoubtedly happening as we speak to untold millions of forgotten sites.
So many scanners scan for various wordpress sites, if they save their results then they can more-or-less immediately build huge botnets.