Mass website compromise

Compromise of legitimate sites at scale, usually through vulnerable content management plugins or themes, so attacker content is served from domains visitors already trust.