Hackers are using a bug in PHP7 to remotely hijack web servers