We bring you breaking news right as it happens, with DesertCP’s service becoming suspended.
This is followed by Speedy CPPSHQ’s investigation, which lead to us discovering that https://desertcp.co/join/ was replaced with an automatic download which contained sensitive information, such as the database password. The main issue was the owner failing to install PHP correctly, which is why the file downloaded straight to your computer.
Matt’s CPPS who hosts DesertCP, quickly took action and suspended DesertCP to risk any further security breaches.
DesertCP are yet to comment on this massive security flaw, but the automatic downloads may have caused many issues, even the public freely being able to access the configuration files.
We will bring you more news as soon as it arrives.