I'm quite stumped here as I am not an expert when it comes to scripts..
Some users, searching for a product which my website provides, get presented with genuine links such as "https://www.brewcraft.co.za/index.php/latest-promotions/205-new-alembic-pot-still". However, when they click on the link, they are redirected to some fake pages (which seem to differ all the time). This site has also been plagued by issues where spam has originated from it..
I have found some index.php files have been given permissions of 755 and suspicious scripts in them such as: 366b1/
I am not the host of the site and only have cpanel access.. what can I do and where can I look/scan for this
I have tried most free website scanners but they all show negative infection.
I have the latest Joomla version and all my plugins are up to date.