[AusNOG] whmcs.com - hacked

[Mark Newton]

On Tue, May 22, 2012 at 10:32:59AM +1000, Joseph Goldman wrote:

 >  But of course, all your other information such as tickets and billing 
 > information should be on the lookout to change, change all your 
 > important passwords especially if for some reason you supplied it in a 
 > ticket to WHMCS or anything of that nature.

I wouldn't put too much faith in the claim that client passwords
are okay because they're hashed either.  A bit of rainbow table
analysis would yield a decent proportion of passwords pretty quickly.

 - mark