284,000 WordPress sites hacked? Probably not.
Some Amazon order confirmation emails have been reported as fakes. Every link leads to malware. Every link (there are 8 in this example – similar to this attack) leads to a different compromised WordPress site. And they all seem to be using one of the most common WordPress theme directory