1 story taggedTeamUpdraft.
Attackers breached plugin maker TeamUpdraft, lifted remote-management keys, and are installing fake maintenance plugins on live sites.