WordPress sites being filled with random PHP files
First steps: Take the server offline, if you can access it directly. – The chance of your server being part of a larger scheme at this point is pretty high. If you can’t take it offline, check your authorized_keys files in ~/.ssh/authorized_keys and remove entries that don’t belong to you. (Repeat this step for every … Read more