I am not sure how it works... but can somone please tell me what is the process of hacking? 1. they know our ftp info? (how) 2. some PHP application vulnerability. Thanks so much.
Don't read spam. Some quick google'ing shows that the Internet Identity SIRT is hosted off of a *.com TLD. If it was an actual Internet organization trying to prevent Identity theft, it would be made up of geeks and hosted off of a *.org TLD. Like w3.org or icann.org is. It's a for profit business. But to answer your question, best bet would be to get with your host, explain that you have someone claiming that you;ve been hacked, and ask for action. Normally I would ask for details here but since this is a public forum, that's not a good idea. Communicate with your host.