Netcraft has identified large numbers of phishing and malware sites built on compromised WordPress blogs. The popular blogging platform is also popular with Internet criminals.