I know there are some installing apps for cpanel that either do by default like wptavern mentioned can't remember which one it was. And other giving the option to turn auto updates off which maybe a lot of people do due to worrying it will break their site not sure.

Would be interesting if there was a break down of what versions of WordPress are being hacked e.g. 4.7 to 4.6 and so on.