https://paulstechtalk.com/2008/11/fake-wordpress-update-2-6-4-steals-data
Fake Wordpress update 2.6.4 steals data!