In this particular instance, the threat actor behind the attack exploited an admin vulnerability in the company's website.