As of today I have now had 3 sites on my cpanel server compromised. All 3 sites where compromised in different ways.
1. too easy of an email password
2. setup email through cpanel even though client was using google apps
3. logged into cpanel with client password and added addon sites that were phishing attempts that pointed to google drive pages.
These are just three examples that happened to my clients in just the past 4 weeks. I'm a bit stressed out over it too. No one wants to be losing clients.
How do I or is there a way to add 2-factor authentication to zpanel/sentora logins? Changing passwords does me no good if the client's email account is compromised and the passwords are sitting in it.
I didn't post this under support because to my knowledge this is not a built in option.
1. too easy of an email password
2. setup email through cpanel even though client was using google apps
3. logged into cpanel with client password and added addon sites that were phishing attempts that pointed to google drive pages.
These are just three examples that happened to my clients in just the past 4 weeks. I'm a bit stressed out over it too. No one wants to be losing clients.
How do I or is there a way to add 2-factor authentication to zpanel/sentora logins? Changing passwords does me no good if the client's email account is compromised and the passwords are sitting in it.
I didn't post this under support because to my knowledge this is not a built in option.
