I think it’s actually fixed now. Aside from the news post spam, there was a little site living inside of my website setting Eastern European weight loss courses or something.
I guess that’s what they really wanted. A stable website/hosting and an admin that wasn’t paying attention.
It took me all evening to root out all the malicious php files, delete fake admin users, and whatnot. It was not how I wanted to spend my evening, but alas.
The other websites seem fine, but have been getting a lot of bot traffic. I looked through their files and didn’t find anything like what was going on here.
*sigh*
-Anthony