You work as a Computer Hacking Forensic Investigator for SecureNet Inc.

Use a Web proxy to view the Web server transactions in real time and investigate any communication with outside servers.

Review the source of any HTML-formatted e-mail messages for embedded scripts or links in the URL to the company's site.

Use Wireshark to capture traffic going to the server and then searching for the requests going to the input page, which may give log of the malicious traffic and the IP address of the source.

Look at the Web servers logs and normal traffic logging.