I was contacted yesterday for a potential freelance job. The guy told me he has a WordPress site and that his host told him was hacked and there are code injected files in the install. The host has temporarily blocked all front end access to the site until these files are deleted or fixed.
My question is in regards to the viruses/malware or corrupted files and opening an FTP or SSH connection to this hosting account. What risks are posed when opening a connection to this hosting account? Can these files potentially transfer any malware to my desktop and then again to other sites I open connections to? I am not familiar with this type of situation, and appreciate any insight into it.