Potential Hack / Security Issue

[clintre]

Not on my server or account. I was doing some work for a client who just signed up for s basic web hosting package at JPC.

I was in cPanel and created a couple of email accounts for her.

I noticed that when she would send an email it was coming from some strange email address. When I dug deeper, by logging into her webmail (RoundCube) and looked at identities it had set a different one in addition to the primary and had made it primary.

I checked another account I had setup and it was the same issue, but with a different email address.

So just to make sure that it was not getting hacked after the fact. I created and new email account and immediately logged in to webmail and it also had an additional identity and set as primary.

The client has only had this account for a day.

It is on server iota.

Her domain is amwresumes.com

I am trying to get a hold of her as well or I would have opened a ticket instead. However it is important for anyone on that server to check anyways. I will open a ticket as soon as I get her details for support.

[clintre]

Finally was able to get in and create a ticket #13458882

[clintre]

I have noticed that it only happens if you use RoundCube.