3cx Management Console Hacked

[JianYong]

My 3cx management console has been compromised. The hacker has changed the contact email and password. I couldn't do a password reset. Is there anything I can do to regain my control?

 

[Guillaume Bourgeois]

My 3cx management console has been compromised. The hacker has changed the contact email and password. I couldn't do a password reset. Is there anything I can do to regain my control?

Restore backup with commands line
https://www.3cx.com/docs/backup-restore-command-line/
After restored, change password

 

[JianYong]

I didn't have the backup on my computer. It is hosted with 3cx.

 

[Guillaume Bourgeois]

So, you no longer have access to your extension ?

 

[JianYong]

I can still log in to the extension's web client. Incoming call was ok, but unable to make outgoing call.

 

[Guillaume Bourgeois]

At the bottom left, above “Apps,” do you see “Admin”?
What makes you think you’ve been hacked?

 

[JianYong]

I login to the management console daily and the password is always the same until yesterday. No way to reset password as I am not receiving email from 3cx.

 

[JianYong]

Unfortunately, there is no "Admin" above the "Apps"

 

[Guillaume Bourgeois]

I login to the management console daily and the password is always the same until yesterday. No way to reset password as I am not receiving email from 3cx.

Is your PBX on version 20 or 18?
In version 20, the management console no longer exists, and you can’t log in with a username like “admin” (root user).
You need a user with the Owner role, which will provide access to the “Admin” tab at the bottom left, above “Apps”.

If you believe you’re on version 18, it’s possible that you have been upgraded to version 20.
The difference is that the “login” page no longer refers to the Management Console.

 

[JianYong]

I have not done the upgrade. I believe it was still on version 18 unless there was an auto-upgrade.
If that's the case, how do I set the owner role? I don't see the admin tab at the bottom left.

 

[Guillaume Bourgeois]

I have not done the upgrade. I believe it was still on version 18 unless there was an auto-upgrade.

First, you need to verify if this is the case.
Log out and navigate to the page where you normally access your management console.
Take a screenshot and share it ( Do not share your FQDN publicly. )

 

[JianYong]

Ok

 

[Guillaume Bourgeois]

You are still on V18.
So, try logging in with your extension number and password.
You might have assigned yourself "Administrator" rights for the management console.

If that doesn't work and you haven't saved the backup outside of the PBX, you'll need to open a support ticket with 3CX.
Fees may apply.

 

[JianYong]

Ok I will do so. Thank you!