This is not an attack, its just accounts which didn't change their damn passwords when they were told to. I know because I was one of them. I changed my password and look problem solved.

All of these posts are supposed to be downvoted, to prevent the attacker from gaining any additional money.