@jpoh Checked a few other sites hosted there and it looks like probably all of them are affected. Looks like I’ll have a busy day of cleaning up this mess and deleting all these suspicious/malware/botnet files.