• Debian 11 is approaching its end-of-life (vendor EOL date - August 31, 2026). Plesk Obsidian 18.0.80 will be the last release to support it.
    If you are running Plesk Obsidian on Debian 11, we recommend you upgrade those servers to Debian 12 using our dist-upgrade tool.
  • We plan to deprecate and remove the support for XML RPC protocol versions earlier than 1.6.9.1 in Plesk Obsidian 18.0.82. We strongly recommend that you update all existing integrations using earlier versions of the XML RPC protocol to comply with the version 1.6.9.1 specification.

Input My 80s Collection - Spyware?

johnmack

New Pleskian
Just updated this morning after your security email out - and I have to ask what on EARTH were you guys thinking? Is this spyware?

This looks like the panel has been hacked, apropos of nothing I have an icon hovering on top of my settings in some 8 bit art fashion with a stupid "collect the stickers" game?

Whoever thought this was a good idea should be on coffee duty only and not allowed access to a terminal ... ever!

The immediate assumption is - poisoned update injection - thankfully I was able to find it and globally disable before any clients saw it, because it doesn't take a PHD in psychology to know that if a less technical reseller sees this and thinks they have done something to get their account compromised, they will immediately panic and start trying to "fix it" on their own.
Likely causing untold issues.

In a world where security is a constant worry for sys admins, intalling something without any preamble like this instantly plucks on the string of hack concern and I cannot understand who would ever have green-lit such a completely unnecessary and out of place "feature".

Do not ever install garbage like this and turn it on unannounced on my servers on a paid service that is supposed to be both professional and secure. It smarts of spyware, and to be frank, it dunks my trust in your product vision right into the toilet.
 

Attachments

  • Screenshot 2026-08-07 at 09.39.01.png
    Screenshot 2026-08-07 at 09.39.01.png
    993.6 KB · Views: 0
Back
Top