Also, all the providers who've been hacked recently didn't change their root passwords since the last hack, so don't blame them for their customer's incompetence 😬

(Quote)

(Quote)

What we do know is that Softaculous (Virtualizor's parent) had a security incident in 2024/2025 after some screenshot‑grabbing software on support workstations got compromised. It’s highly likely - th

(Quote)

(Quote)

The username and password are randomized.

(Quote)

"Manage my Server" leads to a 500 error page, I was able to reset my password in virtfusion and log in with password, but I guess it's something you should know

(Quote)

(Quote)

(Quote)

The only features I think are actually useful are: stop, start, reboot, mount ISO, reinstall, VNC, maybe change root password and maybe bandwidth stats. Am I missing something?

(Quote)

(Quote)

If your dumb and use an easy hackable password, then you not really dream of sonething big, but fast cash.

Even if they somehow did, that still does not explain how they obtained the Virtualizor login password in order to enter the authenticator code. Any such access attempt would have appeared in the logi

Root Virtualizor GUI gives you a terminal option, similar to cPanel can give you terminal as a shared user although that is jailed shell to copy files/extract zips ect

If an attacker has root access on the bare-metal host, anything running on top of it (VMs included) is effectively untrusted. Changing VPS or account passwords is good on paper, but it doesn’t meaning

My VPS not hacked either - old customer though. Maybe it was just a new node with some bad configuration or bad password. This is good though, because it could mean they don't use same password everyw