Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

CyberPanel Vulnerabilities crypto miner removal

https://www.securityweek.com/cyberpanel-vulnerabilities-exploited-in-ransomware-attacks-shortly-after-disclosure/

If you are using CyberPanel and your server is infected with a crypto miner kinseng and kdevtmpfsi, you can use this script to remove them.

to remove the crypto miner

Step 1
download and run this script

https://github.com/Diwakerpandey/crypto-malware-removal-kinseng/blob/main/cryptop-malware-removal.sh

step 2
check the cron crontab -l

remove the cron if you see any sh script with wget download link with random ip downloading the ssh script.

`

Comments

Sign In or Register to comment.