my root password hacked every time i change it

[activa]

i'm running in a probleme ... every time i change the root password , the hacker send me a email about my new password ...

how he can see my new password ?

 

[quietFinn]

i'm running in a probleme ... every time i change the root password , the hacker send me a email about my new password ...

how he can see my new password ?

It's not your biggest problem what the hacker can see or do, you biggest problem is that the hacker is there.

A rooted server can be almost impossible to clean, your best option would be to reinstall the OS and restore accounts from backups.

 

[activa]

but as i know he can change the password , not see it ? !!!

 

[quietFinn]

What kind of email do you get? From who is it coming? Is the new root password in that email?

 

[activa]

he is in chat with me , .... every time i change password , he send me in the chatbox my new password !!!

 

[24x7server]

Hello,

I will suggest you please install LMD- linux malware decet on your server and scan whole server, May be hacker has a placed any scripts in your account


And are you updating your root password in your any billing system ?

 

[cPanelMichael]

Hello

I recommend consulting with a qualified system administrator to assist you with this issue. It's possible your server has been rooted, or your local machine is keylogged. A security expert should be able to assist you with this type of situation. You can find a list of system administration services at:

cPanel Application Catalog - System Administration

Thank you.