The Dark Visitor

We run Wordpress here at TDV and wanted to make sure others had seen this alert on a fake 2.6.4 update:

Can you find five differences between these two sites? Wordpresz.org may indeed look like WordPress.org, but the 2.6.4 release it’s distributing is on purposely backdoored in order to steal the content of cookies from those who have installed it, potentially leading to to hijacking of their WordPress blogging platforms for malicious purposes.