Security Advisory: Please Lock Down Your Administrator Access

Three of the biggest indicators:

  1. This starts to happen with your system

  2. You have .clean.sh in the base html directory: /var/www/html/.clean.sh

  3. Your freepbx.conf file has been cleared out or modified.

The link to the other thread has some steps to check for compromises.

1 Like