Attacked /.bitcoin/wallet.dat

cPanelLauren

Product Owner II
Staff member
Nov 14, 2017
13,266
1,304
363
Houston
I"d suggest looking at something like the following:

 

rackaid

Well-Known Member
Jan 18, 2003
89
29
168
Jacksonville, FL
cPanel Access Level
DataCenter Provider
DAT files are used by MS Windows. There's no specific application. Most likely, attackers are using your server to distribute this file as part of a larger malware attack. You can check your web server logs to see if the file is active.

Even if there is no activity, you will want to secure the site and account on which you found the file.
 

toplisek

Well-Known Member
Jan 7, 2010
286
23
68
Thank you for the information. Will Sucuri plugin detect such malware inside WP installations?
Is there any plugin to be used inside cPanel application which can scan for such obvious malware?