> credentials that gave it access to a “small number” of employee accounts and the hosting accounts of roughly 28,000 customers.
> obtain login credentials for WordPress admin accounts, FTP accounts, and email addresses for 1.2 million current and inactive Managed WordPress customers
I'm curious what they concretely did:
> goal is to infect websites and servers with malware for phishing campaigns, malware distribution
> weight loss websites
but hm. I guess I don't know a lot about malware, phishing and stuff. How would you gain exactly?