Open source web hosting software compromised with DDoS malware