Hacked! Help Please.
It's a typical Phishing site that asks for login & pw, mimicking a banking website.
The perp found a way to bind ports 7950 on 3 of my ip's to his site. My question is, where are these sites stored? I checked all of /home and the ..htdocs and I'm at the end of my rope. Any help is appreciated, thank you.
