It is unfortunate that just a few hours ago, we have been notified that our twitter account is hacked. Upon digging further, we have identified the root cause of the issue. The hack originated from WHMPHP and since we have set up our twitter account in our WHMPHP installation, the hacker was able to gain access to our twitter account. The hacker also sent out mass emails disseminating FALSE claims, and we believe might be a supporter of a competitor.
We have also received an email from WHMPHP to upgrade to the latest version which is 4.3. The new version fixes all their script’s vulnerability and patched security loopholes. Please see below for an excerpt of their email:
This is not a scheduled release but to address a couple of bugs in whmphp. This includes whmphp panel address from being included in search engines such as google. For security purpose this needs to be disabled. This version also introduces some serious changes in the authentication system as well as latest API modules for external billing scripts. It is also recommended that you disable web spiders using robot.txt files.
Thank you
Whmphp.com
We have temporarily suspend access to WHMPHP as we are currently evaluating the incident. We will notify you again ASAP when we have resolved this with the WHMPHP guys.
Thank you for your continued support. We assure that we are here to stay for MANY, MANY more years to come. In fact, we are cooking something up that everybody will like. Our new project will benefit most if not all people looking for web presence. So stay tuned!