WordPress Password siphon

[E.A.]

Hey people,
I know a lot of authors have a WordPress site so I thought I'd put this out there for everyone.
I was sent a friend request by someone called Elizabags on Goodreads. It had her email as rosiedoyleiva@gmail.com. So I googled it to see exactly who she was and came up with an alert saying "Leaked passwords from WordPress sites- Siphon!"
It had another name visible on the link description which was Chris Campo, but I'm not going to risk clicking on it to see any more.

Obviously, my apologies to the member if this has nothing to do with her, but to me, it's suspicious enough to reject her friend request straight off.
Can the mods look into this one for us, please?
Thanks, guys. :)

[Christina]

Send this account to Goodreads. A lot of us have been getting friend requests from compromised accounts. Mostly they are easy to spot because they are advertising sex trafficking websites, but it looks like they are targeting existing accounts that haven't been used in years. I've sent a few over through the contact us link and they've responded saying they will investigate.

[G.G.]

https://www.goodreads.com/topic/show/...

and

https://www.goodreads.com/topic/show/...

(second link post #38, read Emily's post and see what Goodreads is doing about it)

[E.A.]

Thanks. G.G
Glad to know Goodreads are taking it seriously and doing something about it all. I've just joined the 'Feedback' group to keep up with the news on it.
And I've just reported the profile in to them as Christina suggested.
Thank you, for all your help, both of you. :)