WordPress sites are being backdoored with rogue admin users

A malvertising campaign has evolved to give hackers control of entire sites.