A threat actor was observed targeting Drupal vulnerabilities patched earlier this year to install a backdoor on compromised servers, IBM reports.
http://feedproxy.google.com/~r/Securityweek/~3/UldYVjKHHG4/hackers-exploit-drupalgeddon2-install-backdoor