Phishing at the URL below on 25.06., 12:05 CEST.
jcbpr[.]org/wp-comments/mode/sync/excel/excel/excel/login.php?cmd=login_submit&id=b27fbb1c552e529c8bee778d74890d2eb27fbb1c552e529c8bee778d74890d2e&session=b27fbb1c552e529c8bee778d74890d2eb27fbb1c552e529c8bee778d74890d2e
Are you 100 % sure that you deleted everything, changed passwords and made sure the breach will not happen again?