Is sysuser a default wheel user on cPanel?
I am stuck into a weird issue in my servers, a few customers reported me that all their wordpress websites has a plugin called "WP File Manager" installed, i checked and i found it is installed on all the wordpress websites on the server.
I checked if my server is compromised, the first thing i checked i wheel users, i found that there's a wheel user called "sysuser" but there are no login logs for it.
I have multiple VPS added into my server as client's vps, i checked many of them has sysuser as wheel user and many do not.
I am worried if my whmcs or some servers are compromised?
-
Hey there! WP File Manager is a valid WordPress plugin. I checked an AlmaLinux 8 machine and I do not see a "sysuser" present there. Users that we created are documented here:
https://docs.cpanel.net/knowledge-base/general-systems-administration/system-user-accounts/
0
Please sign in to leave a comment.
Comments
1 comment