After the break I came back to my CPU pegged at 100% I was unable to SSH in or connect via the web GUI. I power cycled the unit. I can now access through SSH but cannot access through the GUI, the phone apps are not working as well. I have also noticed under systemctl that fail2ban & httpd services …

Those are signs of the exploit @dicko linked to. To stop the bleeding I recommend you stop httpd and crond, remove the bogus accounts and get rid of the /tmp/k. Asterisk will still work and you can have phone service while you work on recovery.

FreePBX Community Forums

Gui failing to load

General Help

dicko (dicko) December 28, 2021, 5:30pm 2

0 Day FreePBX Exploit? Security

I was made aware of a new zero-day FreePBX exploit today - apparently it affects Phone Apps, even if you’re not using Phone Apps in a licensed capacity. Does anyone have any information on this? Apparently, and earlier post on the subject was pulled down? Do we have any sort of statement from Sangoma or an ETA for a security fix? Should we be closing down the public facing Phone Apps port for all customers? -Chris

show post in topic

Home
Categories
FAQ/Guidelines
Terms of Service
Privacy Policy

Powered by Discourse, best viewed with JavaScript enabled