Possible root compromise: User account cyberpanne1 is a superuser (UID 0)

Support and Discussion General Discussion
1

Possible root compromise: User account cyberpanne1 is a superuser (UID 0)

Please help

2

You can give this a try if you still have ssh access: GitHub - elwizard33/Cyberpanel-Server-Wizard-Cleanup: These scripts are designed to help identify and clean potential malware and ransomware infections on CyberPanel servers it will check for the attack related files and processes and try to get rid of them

1 Like
3

If the account is unknown or not needed, you can try and remove it by editing /etc/passwd