Potential Vulnerability in CyberPanel / OpenLiteSpeed Exploited by Unauthorized Access

[KibbelKing]

Take a look into the main thread regarding the Issue, there are the files mentioned and what todo.

Critical Security Alert: Vulnerable CyberPanel Instance Detected on Your Network

Bro I’ve ran into the same issue but a little deeper. ps aux | grep -E 'kinsing|udiskssd|kdevtmpfsi|bash2' /usr/lib/secure/udiskssd This file cannot be deleted. “Opperation not permitted” Fix with: pkill -f udiskssd chattr -i /usr/lib/secure/ rm -f /usr/lib/secure/udiskssd chattr -ia /etc/cron.hourly/oanacroner rm -f /etc/cron.hourly/oanacroner Same issue with editing crontab and the file does not have the immutable attribute. Fix the crontab with: chattr -ia /var/spool/cron/root chattr…