WHM Ransomware Alert

Shahzadqayyum

• December 16, 2022 15:30

Hello Everyone! Feeling sad, As I more than 60 sites due to ransomware attack 2 days ago. Almost every got encrypted due to ransomware. Php, images, settings files, cpanel script files, even SQL tables. /Backup directory also got encrypted. Totally helpless after this attack. Every got renamed to .filenew . Tried to find the solution on google. But no results for WHM Ransomware. Please keep off-site backups. Will update screens and more details in next post.

• 

  TVCNet Website Hosting and Security Services

  • December 17, 2022 01:33

  Can you please share other details? - version of WHM installed? - Other details we should watch for (if a zero-day we haven't heard of yet)?

  0
• 

  cPRex Jurassic Moderator

  • December 19, 2022 15:07

  Since this was a root-level issue, it could have been as simple as your password getting compromised by some external tool. If you have details that you feel shouldn't be shared on a public forum, please email security@cpanel.net with any information you have.

  0

Please sign in to leave a comment.