INJ3CTOR3 malware steals FreePBX SIP credentials for phone fraud
An updated installer uploads 17 configuration files every minute to two staging servers, Cyble reported on October 28.
Stories per day · 30 days
5 stories, newest first · one card per story
Stories tagged #freepbx
INJ3CTOR3 steals FreePBX credentials so toll fraud survives cleanup
A September installer uploads secrets from 17 telephony, database, and mail files; researchers saw no live theft.
INJ3CTOR3 FreePBX implant now steals SIP trunk and admin credentials
Cleaning the host no longer ends exposure: stolen trunk secrets let the operator place calls from anywhere.
FreePBX security advisory (AV26-973)
Canadian Cyber Centre advisory AV26-973 lists vulnerable FreePBX modules with fixed versions available in the 16.x and 17.x release lines.
[webapps] FreePBX 17.0.2 - Remote Code Execution (RCE)
Exploit-DB published a remote code execution exploit targeting FreePBX version 17.0.2.