Web Hosting Talk : Web Hosting Main Forums : Hosting Software and Control Panels : WHMCS hacked [merged]

[stablehost]

Originally Posted by Simplex-Ed

Please tell us more?

I'm not going to talk about his security issues in a public forum, but let's say it was a default box with no lock down on security at all...

With storing thousands of business credit cards, he should have known better, it wasn't PCI compliant by any means.

EDIT: This was security issues with his webserver box, not security issues with the WHMCS script itself.

[LXJTian]

yes, I see too, whmcs.com hacked

[Simplex-Ed]

Originally Posted by nerdie

I'm not going to talk about his security issues in a public forum, but let's say it was a default box with no lock down on security at all...

With storing thousands of business credit cards, he should have known better, it wasn't PCI compliant by any means.

EDIT: This was security issues with his webserver box, not security issues with the WHMCS script itself.

I know they (or did) use HostGator... but like another poster said, I hope it wasn't exploited via the WHMCS sw.

http://twitter.com/#!/JoshTheGod/sta...95003379548160

"Database #leak coming soon."

[stablehost]

https://twitter.com/#!/UG/status/204592550265360384

"http://www.whmcs.com Hacked by #UGNazi @JoshTheGod @ThaCosmo @le4ky Database #leak coming soon."

[gordonrp]

My license is showing as "invalid" wonder if it's because of this.

[Nick H]

https://twitter.com/#!/JoshTheGod/st...95003379548160

http://Whmcs.com Hacked by #UGNazi @UG @Thacosmo @le4ky Database #leak coming soon.

[henrique-s]

http://twitter.com/#!/JoshTheGod

UGNazi ‏@UG
http://www.whmcs.com Hacked by #UGNazi @JoshTheGod @ThaCosmo @le4ky Database #leak coming soon.

Sorry, already posted.

[Martin-D]

Originally Posted by nerdie

https://twitter.com/#!/UG/status/204592550265360384

"http://www.whmcs.com Hacked by #UGNazi @JoshTheGod @ThaCosmo @le4ky Database #leak coming soon."

'Database #leak coming soon.' - Not sure what to make of that.

[Simplex-Ed]

Originally Posted by gordonrp

My license is showing as "invalid" wonder if it's because of this.

It is, their licencing servers are down/wiped/something.

[Coolraul]

Originally Posted by nerdie

I'm not going to talk about his security issues in a public forum, but let's say it was a default box with no lock down on security at all...

With storing thousands of business credit cards, he should have known better, it wasn't PCI compliant by any means.

EDIT: This was security issues with his webserver box, not security issues with the WHMCS script itself.

Nerdie, how do you know this?

[public_html]

http://docs.whmcs.com/Licensing

This seems to be working

[Simplex-Ed]

Taken over their twitter...

http://twitter.com/#!/whmcs/status/204596829042638848

[KMyers]

Originally Posted by Coolraul

Nerdie, how do you know this?

I am also wondering the same, I am hoping this is not true

[mcduck]

Their twitter account was taken over aswell.

They better have a backup licensing server

[gordonrp]

License Noconnection

is what im seeing on our install, seems their licensing server is ?also? down.