BTCPay Server says automated probes are now targeting a password-change route that could expose administrator credentials.