The server cannot log in and is under attack. The system is Ubuntu 22 and the CyberPanel version is 2.3.5. What should I do now? Will updating to version 2.3.8 solve the problem?

[aigunkai]

The server cannot log in and is under attack. The system is Ubuntu 22 and the CyberPanel version is 2.3.5. What should I do now? Will updating to version 2.3.8 solve the problem?

[aigunkai]

Does CyberPanel have a detailed tutorial to help with this issue? Where can I get it?

[bcat95]

Read more here:

Critical Security Alert: Vulnerable CyberPanel Instance Detected on Your Network

Step 1: Pause Suspicious Processes First, pause or stop any processes related to malware. View the list of processes: ps aux | grep -E 'kinsing|udiskssd|kdevtmpfsi|bash2' Then I checked the status of process kdevtmpfsi: systemctl status <PID> Copy the file calling paths and delete in the step below Stop the malware process: sudo kill -9 <PID> (Replace <PID> with the ID of the kinsing process or other suspicious processes.) Step 2: Remove Suspicious Service Check and remove the bot.ser…

[aleksandr]

@aigunkai

Does CyberPanel have a detailed tutorial to help with this issue? Where can I get it?

if the files are .locked format, only reinstall OS

[Kais]

Better: Use a Backup and restore your server to statre of last week