My cPanel was hacked:: Mysterious email accounts

[buddyq]

Hi there,

I dont exactly know how cPanel works but I am hosted with HostGator and my site was suspended for spam. Then it happened again the next day. It was not my site but my cPanel that had been compromised. There were 4 new email addresses that I did not create.

How could someone have done this? They are using version 11.11.0 STABLE.

ANy ideas?

 

[cPanelDavidG]

Hi there,

I dont exactly know how cPanel works but I am hosted with HostGator and my site was suspended for spam. Then it happened again the next day. It was not my site but my cPanel that had been compromised. There were 4 new email addresses that I did not create.

How could someone have done this? They are using version 11.11.0 STABLE.

ANy ideas?

Common thing recently is someone simply brute forcing the passwords and the passwords being fairly easy to guess. You may also wish to scan your machine for viruses and spyware to ensure nothing is logging your keystrokes for passwords.