WHM Ransomware Alert

[Shahzadqayyum]

Hello Everyone!
Feeling sad, As I more than 60 sites due to ransomware attack 2 days ago.
Almost every got encrypted due to ransomware.

Php, images, settings files, cpanel script files, even SQL tables.

/Backup directory also got encrypted.

Totally helpless after this attack. Every got renamed to .filenew .


Tried to find the solution on google. But no results for WHM Ransomware.

Please keep off-site backups.

Will update screens and more details in next post.

 

[tvcnet]

Can you please share other details?

- version of WHM installed?

- Other details we should watch for (if a zero-day we haven't heard of yet)?

 

[cPRex]

Since this was a root-level issue, it could have been as simple as your password getting compromised by some external tool. If you have details that you feel shouldn't be shared on a public forum, please email [email protected] with any information you have.