Attackers have been carrying out WPSetup attacks, taking advantage of users who have installed WordPress but not yet configured it.
Source: Threadpost