• Introducing WebPros Cloud - a fully managed infrastructure platform purpose-built to simplify the deployment of WebPros products !  WebPros Cloud enables you to easily deliver WebPros solutions — without the complexity of managing the infrastructure.
    Join the pilot program today!
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.

Problem with phishing sites and mail scripts

B

buliwyf

Guest
Hello,

We are running an Plesk 8.4 on a debian etch machine.
Since days we have problems with phishing sites and mailer scripts getting installed
in the httpdocs directory of various domain.
The problem even exists with vhosts which only contain a simple html file.
It seems to be a security Hole in plesk, but i don't find the creation
of the files and folders in the logfiles. If i try the updater in Control Panel
my plesk Version is up to date.

atm i have no idea to get rid of this. just checking file system very often.
 
Update: after disabling Horde nothing happend for hours.


1 Minute after my post i could find paypal phising files in one of our domains.

What other features are bound to the domain?
eg. webmail.example.com is disables
are there other subdomain?
 
Hello,
I am using the Parallels Plesk Panel version 9.3.0. In this i need a scripts for creating sub-domain. Please help me to resolve my issue.

Regards,
Balaji.V
 
Back
Top