my root password hacked every time i change it

activa

Well-Known Member
May 23, 2006
213
1
166
Morocco
cPanel Access Level
Root Administrator
i'm running in a probleme ... every time i change the root password , the hacker send me a email about my new password ...

how he can see my new password ?
 

quietFinn

Well-Known Member
Feb 4, 2006
1,222
87
178
Finland
cPanel Access Level
Root Administrator
i'm running in a probleme ... every time i change the root password , the hacker send me a email about my new password ...

how he can see my new password ?
It's not your biggest problem what the hacker can see or do, you biggest problem is that the hacker is there.

A rooted server can be almost impossible to clean, your best option would be to reinstall the OS and restore accounts from backups.
 

quietFinn

Well-Known Member
Feb 4, 2006
1,222
87
178
Finland
cPanel Access Level
Root Administrator
What kind of email do you get? From who is it coming? Is the new root password in that email?
 

24x7server

Well-Known Member
Apr 17, 2013
1,907
95
78
India
cPanel Access Level
Root Administrator
Hello,

I will suggest you please install LMD- linux malware decet on your server and scan whole server, May be hacker has a placed any scripts in your account


And are you updating your root password in your any billing system ?
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,913
2,201
363
Hello :)

I recommend consulting with a qualified system administrator to assist you with this issue. It's possible your server has been rooted, or your local machine is keylogged. A security expert should be able to assist you with this type of situation. You can find a list of system administration services at:

cPanel Application Catalog - System Administration

Thank you.