0

Right now I am facing very strange issue on magento setup. In my webshop some randomly admin user created with unknown username,and email . Whenever I try to delete that unknown user it automatically created with-in some days. Please check below screenshot.

enter image description here

Is there any way to prevent this type of issue ? I am too curious know about this, how this type of user created in admin without admin details?

Is Any one facing this of issue ?

Any help will be appreciated.

Thanks.

4

Failure to apply SUPEE-5344 (shoplift patch) allows for direct injection of admin accounts into the Magento database by a simple POST statement.

Other serious holes were filled by subsequent patches.

3

that sounds like you were hacked.

first thing would be to search the shop files for the email addresses I think. If you have ssh access to your site you can do this by executing grep -r "email@example.com" /your/magento/root/directory

If you do not find anything, you should search your database for the email addresses (with phpmyadmin for example you can search in all tables)

You also should change your admin user credentials, change the admin url (in your app/etc/local.xml) and deny access to your /downloader dir over the webserver. Very likely, someone had access to your magento admin account and installed an extension that adds the admin accounts (this can also be installed under a well known extension name but with different code).

If you have your code also in a Version Control system like git or a backup (or whatever) you should reinstall the shop from there, since it is possible that Magento Core (or other modules) files where edited to (for example) send sensitive data to anywhere

also, before i forget, be sure to install all security patches from the official magento homepage

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.