I've checked into this and was able to confirm the account has been compromised; whether the result of an unknown/undisclosed Wordpress vulnerability, an issue with a theme/plugin, or if someone has gotten an admin password, malicious files were uploaded to the core WordPress files on the account. Knowing this, I have removed the malware and lifted the suspension, but we would strongly recommend removing all files and reinstalling from fresh, vendor supplied files of the latest version - we normally can't lift suspensions like these more than once, so you will want to ensure it's secured again.