INJ3CTOR3 Malware Steals FreePBX Credentials to Enable Fraudulent Calls Even After Server Cleanup

The INJ3CTOR3 malware has expanded its FreePBX toll-fraud campaign with automated credential theft, letting attackers keep billing unauthorised calls to victims even after infected servers are cleaned, GBHackers reports. Artifacts from September 2026 show the installer targeting 17 configuration files containing telephony, database, management and mail-relay secrets.