the hacker tweeted he also hacked antonseo which was using wordpress. the owner probably used some outdated plugins which were open to exploits. I'll be posting a list of what these hackers scan on based on what I have collected to help others protect their wordpress sites.
My bad, I have already reported my thread to mods to get it deleted.