Suspicious activity

[NightHawk]

I would like to report that two folders containing scam scripts had appeared in my file list of my site.

One folder called "chase" and the other called "newsscam".

 

I was alerted by a third party about one of the phishing scripts and have now deleted and searched and found a second hiding within my site.

Both are now deleted.

 

I would like to know is there a way to find out who and how they placed these files within my site?

What steps do I take to prevent such an attack?

Thanks.

[Wizard]

Did you use third party software that wasn't from cPanel? Did you give your account details to someone else?

[NightHawk]

Did you use third party software that wasn't from cPanel? Did you give your account details to someone else?

 

 

 

 

All i have used was a ftp (coreftp) to upload some files. I've never had any problems with it,

and I keep all my passwords safe.

 

 

I have changed all said passwords and am now looking through the logs to see the Ip addresses to block them.