The campaign was an opportunistic supply-chain attack abusing a weaponized cloud video player.
https://threatpost.com/data-skimmer-sothebys-real-estate-websites/177347/
GootLoader hijacks WordPress sites to lure professionals to download malicious sample contract templates.
https://threatpost.com/gootloader-accounting-law-firms/177629/