Since scare tactics appear to be at the very least start thinking about the issue, or what compels some people to take fix wordpress malware a little more seriously, allow me to shoot a scare tactics your way.
No software system is resistant to bugs and vulnerabilities. Security holes will be found and guys will do their best to exploit them. Keeping your software up-to-date is a good way to stave off attacks, once security holes are found because their products will be fixed by reliable software sellers.
You also need to set the"Anyone Can Register" in Settings/General to off, and you should have some sort of spam plugin. Akismet is the old standby, the one I use, but there are lots of them these click for source days.
Make a note of your new password for the next time you sign in! I recommend the version of the software *Roboform* to remember your passwords.
Implementing all the above will probably take less than an hour to complete, while creating your WordPress website more resistant to intrusions. Over 1 million WordPress sites were cracked last year, mainly due to easily preventable security gaps. Have yourself prepared and you're likely to be on the safe side.