Sprawling Active Attack Aims to Take Over 1.6M WordPress Sites

[Cerberus]

Cyberattackers are targeting security vulnerabilities in four plugins plus Epsilon themes, to assign themselves administrative accounts.

https://threatpost.com/active-attack-takeover-wordpress/176933/