Woke up to a notification email from Google Search Console that someone new was added as an owner to one of my websites hosted on Media Temple. Logged in to find a whole bunch of new php files with dubious contents created earlier today, with .htaccess allowing them to run. Ugh.