Threat actors compromised WordPress sites to deploy a script that was used to launch DDoS attacks on Ukrainian websites.