New Windows malware can also brute-force WordPress websites