CCBill Security Update

[MrCockTale]

Quote from email

CCBill has had an incident that compromised a minimal percentage of our customer's hosting server user names and passwords. While we are investigating the circumstances, as an added precaution, we feel it is important that all of our customers consider the following:

In order for your account to have been potentially affected, your setup must meet the following criteria:

1. Unix/Linux box.
2. Submitted ftp/telnet/ssh information about your current server to CCBill.


At this time we are asking all of our CCBill clients to take the following steps:

1. Please change your server password(s) or have your host do so.
2. Please have your host scan your server(s) for an installation of 'eggdrop' and to see if port 9872 is open.
3. If the instance does occur and your host is unfamiliar with how to disable the installation, please have them contact [email protected] with the Subject line - Eggdrop removal - and someone in our support department will contact them immediately.

We want you to know that:

1. We have corrected the source of the problem.
2. We are working diligently to discover who was behind this.
3. No other systems at CCBill were affected and only hosting passwords need to be changed.

------------------
========================= www.pink-post.com

[This message has been edited by MrCockTale (edited 12-20-2001).]

[[Labret]]

Does ALOT of good after they root your fucking box.

[JackFoley]

I thought CCBill denied this was happening?

[rollin2]

labret,
no doubt lol!!

well, one less admin unemployed today