A remote access trojan was deployed using an Obsidian plugin. The plugin was abused to gain unauthorized access. Obsidian's security is compromised.