I’ve been hacked! Macro [thanku-outcall]; thankuohoh

It also does this:

grep AMPDB /etc/amportal.conf
grep ARI_ADMIN /etc/amportal.conf

to get your database info and passwords and your ARI admin user and password…

ouch!

What is this, the distro or something else and what version is this running and what was it initially set up as?

Good luck and have a nice day!

Nick