Malware sending spam emails from WHM and blocking mail delivery
Budget: $30 – $250 USD
the malware i see is not from an account
its like from server
[root@de ~]# awk '$3 ~ /^cwd/{print $3}' /var/log/exim_mainlog | sort | uniq -c | sed "s|^ *||g" | sort -nr
96010 cwd=/var/spool/exim
58089 cwd=/usr/local/cpanel/whostmgr/docroot
2097 cwd=/root
1147 cwd=/
458 cwd=/etc/csf
its like from server
[root@de ~]# awk '$3 ~ /^cwd/{print $3}' /var/log/exim_mainlog | sort | uniq -c | sed "s|^ *||g" | sort -nr
96010 cwd=/var/spool/exim
58089 cwd=/usr/local/cpanel/whostmgr/docroot
2097 cwd=/root
1147 cwd=/
458 cwd=/etc/csf