Anonymousfox and postfox mail id's found in C panel which are not created by user

Operating System & Version
Centos 7
cPanel & WHM Version
90.0 (build 17)

Vijayakumar J R

Active Member
Jul 15, 2019
30
0
6
banglore
cPanel Access Level
Root Administrator
Hello team,

We hosted WordPress websites on our C panels.
I found below miscellaneous Webmail id's which are not created by us. I guess some hackers created and we want to know how it has been created
* [email protected]
* [email protected]


Please help to avoid/stop creating such mail id's and let me know how they are creating.

Awaiting your response.

Thank you all
 
Last edited by a moderator:

cPRex

Jurassic Moderator
Staff member
Oct 19, 2014
16,585
2,614
363
cPanel Access Level
Root Administrator
Hey there! This activity indicates a Wordpress compromise on the system that allows the attacker to create those email addresses on your machine. We have an article at the following link that describes the issue:


which also links to some other forums posts here that go into more detail on this. Let me know if you need more clarification after checking those out!
 

keat63

Well-Known Member
Nov 20, 2014
1,963
267
113
cPanel Access Level
Root Administrator
Anonymousfox is quite a well-known WordPress hack, and a few years old now.
If this was a recent find, then I'd suggest that you're using an older (unpatched) version of WordPress.