“There are some good bad guys updating the post excerpt with the message: ‘Update WordPress or you will be hacked,’ which is kind weird,” Cid said. “But overall we’re seeing just simple defacement attempts, using modified versions of the exploit that was shared publicly.”

Not so "weird" in reality. Take this example for example: Notifying someone that their website is hackable usually results in someone assuming you are the attacker/hacker. You should never contact a website owner directly - that will put them in a state of fear, shock and anger and they will bite you just like a wild animal would. It is much simpler and effective to automate a delivery system that gets the point across to the website owner without notifying them of who is trying to help them. Call it anti-hacking if you will. This is a theoretical example of course.