I posted a ticket but wanted to ask here as well. I logged into our reseller account today and noticed that there was an account listed there that I did not create. I have had this reseller account for over 4 years and have never seen this before. When I try to click on the details to open their control panel I get a generic error. Can you tell me how someone created this account and if we have been hacked? My ticket is MOS-20954-740.
There is possibly one bug that can allow such if you do not have ‘moderate everything’ enabled on plans, parallels is aware of it and the way it works.
if you have ‘moderate everything’ enabled this plan actually shows up as an attemped account on OUR panel.
This bug is a weird one where bascially they pass the signup string as a long url, with the supposed ‘approval’ included, but with moderate everything it is stopped dead in tracks. This is something we’ve suggested for years to moderate all, so many do have that enabled. it would be a good time to do so now.
Hi Stephen,
I just saw a similar situation where a Service Account was created (It shows as suspended) I did not create that account. So I have two questions.
Is it safe for me to delete that account?
When you say “moderate everything” I assume you mean you go to Settings|Signup Guard| and tick the box that says “Moderate Everything” is that where you are referring?
Thanks!
Yes do that on signup guard, we will be mass mailing about it soon.
Many people aren’t even disabling signups (the the service account and even admin account)
We took some added steps here to prevent it as well, but it isn’t foulproof.
We have applied a patch today on Hsphere (urgent maintenance) to prevent this from happening.
Thanks Stephen..not sure what the patch did exactly… however the bogus account that was created on mine (that I was unable to delete) is now gone.
Yes, we had to do DB work to remove that, it was a nonfunctional account thankfully