Additionally, when you bring the new system up, do yourself a favor, and turn off PasswordAuthentication in your /etc/ssh/sshd_config file and use key auth instead.
You'll be much safer from this sort of malicious activity.