WHMCS.com Hacked?

[ExsysHost]

SFTP requires Shell access

To prevent a user from seeing others you need to have jail shell access set

I don't allow shell access by any users and to prevent all from having access - even the at the data center

nope not true... it all runs off the mod_sftp system built into proftpd... no need to give out shell access and definitely no need to use jail shell since we are not talking about the openssh sftp sub system.

[ExsysHost]

For those who were freaking out because their data was just leaked making claims of keys to kindom etc... honestly been doing some digging around on different underground sites and it seams that most of their scanners used google to find the WHMCS installs... didnt matter if you pay unbranded or not... the scanners find it with basic google search:

inurl:submitticket.php

then their scanner loops through result pages checking url to be a match and if it is exploitable


see for yourself: https://www.google.com/#hl=en&sclien...bmitticket.php

[BarrySDCA]

day before yesterday my card I had on file with whmcs was used all over GB. bank already reversed it.

I'm not sure if it's related but it seems conicidental. A good idea to cancel any cards you may have had saved with whmcs.

PS: one of the charges was Papa Johns in GB.

[easyhosting]

sorry your card was used

A good idea to cancel any cards you may have had saved with whmcs.

this was advice given by WHMCS once they started to regain control back, so is not new advice