Well-Known Member
Apr 18, 2020
cPanel Access Level
Root Administrator
Dear Sir My WHMCS Got Hacked Today !

Actually , a client placed a order for shared hosting and paid for it ! When I woke up today and checked his order in whmcs I saw no order found and when I checked transactions then transaction shows but client name not shows and when I go to that invoice I'd it shows no invoice

and when I checked my email , I received an email shows an invalid login attempt of admin from username root.

I checked Logs and I saw these logs -

Created Client viral patel - User ID: 259

Client Deleted - ID: 259

Single sign-on Completed: 'Hostt' - Server ID: 1

Server Modified: 'Hostt' - Changes: Password Modified - Server ID: 1

all of these logs are from ' local ' user

I checked whmcs but I did not found any local or root administrator.

anyone please help me.
Last edited: