arssirek

Hi haimabir, we faced the same issue, and the miner code in our case too was placed in this plugin, but I checked the original plugin code and it is clear, so the hackers somehow just modified the files on server I think.