Community
It is known that thousands of sites were damaged due to your fault. Personally, about 10 sites were affected - 4 of which still could not be decrypted.
A decryptor for .psaux and .encryp has now been found.
But still no way to decrypt .locked has been found
Cyberpanel team - are you going to help decrypt files in any way?
I have used Cyberpanel since 2019 and never been hacked.
I run 20 sites with all very different use cases.
without going into your applications (wordpress etc)
are you using any security products like CloudFlare?
the term hacked - is not useful unless you describe what that meant in your case
You are probably not up to date with the latest events.
ignore litespeedlover, I think he is a troll
There are multiple post about the rce root issue.
Wow, never been called a troll!
my point is still the same, but I should have said - I run this probably every other day:
sh <(curl https://raw.githubusercontent.com/usmannasir/cyberpanel/stable/preUpgrade.sh || wget -O - https://raw.githubusercontent.com/usmannasir/cyberpanel/stable/preUpgrade.sh)
There are plenty of problems with cyberpanel - look thru my posts
but this is a FREE service vs paying cPanel etc and in my experience it is for a webmaster not a reseller.
Ive been in DDoS attacks for weeks at a time and litespeed workers with CLoudFlare are the only solution that defeats these attacks (on a budget)
Sorry for those who have been affected. best advice is run these often:
sudo apt update && apt full-upgrade -y
sh <(curl https://raw.githubusercontent.com/usmannasir/cyberpanel/stable/preUpgrade.sh || wget -O - https://raw.githubusercontent.com/usmannasir/cyberpanel/stable/preUpgrade.sh)
Sorry, I misinterpreted your post.
The situation and how Cyberpanel is dealing with it really triggers me.
Especially the fact that users are having problems with the update and are not being helped at all.
Other users are jumping in and try to help if possible, but too late.
It is simply ignored by cyberpanel and sat out.
Running the update script daily is not a good idea. Cyberpanel team sometimes “destroys” services without notice. So I didn’t realize that CP deleted the CSF firewall and left my server idle on the internet. In hindsight, I was hacked 6 weeks before.
And: Every update reinstalls a lot of services. If you had a special configuration (from csf), it is gone with every “update” of Cyberpanel.
Something urgently needs to happen here:
You have to know the Indian mentality and their bumbling. Then you wouldn’t be surprised and a lot of nerves would be saved. @usmannasir One of the main differences is that they can’t act sincerely and would rather promise something a thousand times than tell you outright that it’s a problem, by example. I deal with Indy on a daily basis and I’ve gotten used to
Why you used Cyberpanel?
I deal with a lot of Indians, Pakistani devs and you are partially right. The main problem isn’t the sincerity. The main problem is higher salaries and low margin of profit. They keep saying yes to every request because they are scared that they will lose the client if they say no. They are also scared of losing the client if they raise their prices.
I now deal with just 2 Indian dev companies that charge me higher than normal but give me dedicated services. Very happy with that solution now.
I have experience in non-business, i.e. private contact. Just saying no is something of an insult in their culture, so they prefer to say yes, even if they lie, they take it differently.
But I won’t argue here, there are those who can break it and adapt to other customs.