Criminal hackers appear to have broken in via a compromised admin account.