How to create malicious scripts in folder var/tmp

Morri Luca

• March 19, 2015 04:08

Hi, My question in simpre. I fond in my folder var/tmp malicious scripts from user nobody. I'm sure that noboy in logged with ssh, because every time an user access to ssh i receive an email. I'm sure that noboy in logged in cPanel, because every time an user access to cPanel i receive an email. How is possible insert script in temp file? Is possible that the problem are the contacts form? Thank

• 

  cPanelMichael

  • March 19, 2015 15:51

  Hello, The "nobody" username represents the Apache web server. In addition to ensuring your customers use updated scripts, you should review the "Security Advisor" option in WHM to ensure basic security principles are applied. You may also find the following document helpful:

  0

Please sign in to leave a comment.