Watch out for any emails with WordPress update buttons. Update from your admin, don’t fall for these phishing scams. This article does a good job explaining the attempts.

New email scam targets WordPress users’ database credentials