Web Hosting Talk : Web Hosting Main Forums : Web Hosting : Phishing Scam Imitates cPanel, Targets Webmasters

[M Bacon]

Just got this email from Lunar Pages.

Hello,

We are contacting our customers to warn about a serious security risk being sent via email to people running websites.

First of all, please ensure to never provide your login details for your account on any site that is not directly related to our services, which you can reach through our main site and through your login page (all details included with your original welcome email).

For details on the phishing email that is being sent, please review the following two links:

News details
http://www.thewhir.com/web-hosting-n...ets_Webmasters

Explanation on the phishing email contents with screen shots
http://garwarner.blogspot.com/2009/1...nel-phish.html

Again, please be very cautious when entering any account specific details on any site. You should always check that the site is actually one of ours or contact us directly if you are not certain about the legitimacy of any email you receive.

If you have any questions on this matter, please email support@lunarpages.com

Thank you,
Lunarpages Support

[GMX Networks]

Thanks for the heads up!

[Jack-PNH]

Can you share the list of companies that got targeted?

[V1NCE]

Originally Posted by Jack-PNH

Can you share the list of companies that got targeted?

locaweb.com.br
now.cn
4shared.com
50webs.com
bluehost.com
earthlink.com
github.com
godaddy.com
homestead.com
hostalia.com
hostgator.com
hostmonster.com
ixwebhosting.com
jeeran.com
lunarpages.com
mediafire.com
mozy.com
namecheap.com
netfirms.com
networksolutions.com
pair.com
powweb.com
qwest.com
register.com
resellerclub.com
siteground.com
sitesell.com
softlayer.com
squarespace.com
startlogic.com
t35.com
theplanet.com
ucoz.com
vendio.com
volusion.com
web.com
************.com
webhostingpad.com
west263.com
x10hosting.com
yahoo.com
35.com
bravehost.com
dreamhost.com
enom.com
fatcow.com
krypt.com
midphase.com
one.com
xlhost.com
**********.com
all-inkl.com
angelfire.com
bravenet.com
freeservers.com
freewebs.com
ipower.com
justhost.com
leaseweb.com
pingdom.com
rackspace.com
zerolag.com
arabstart.com
awardspace.com
fortunecity.com
freehostia.com
dynadot.com
pueblo.cz
arcor.de
funpic.de
hosteurope.de
ohost.de
1und1.de
server4you.de
strato.de
usenext.de
aruba.it
isimtescil.net
masterweb.net
ovh.net
speakeasy.net
aplus.net
mediatemple.net
home.pl
nazwa.pl
masterhost.ru
123-reg.co.uk
1and1.co.uk
oneandone.co.uk
fasthosts.co.uk
netbenefit.co.uk
website.ws

[victor-t]

Originally Posted by Jack-PNH

Can you share the list of companies that got targeted?

Refer to http://garwarner.blogspot.com/2009/1...nel-phish.html for more info regarding companies that are targeted.

One of my question is, how did they create a subdomain on HostGator.com?

[SiberForum]

Originally Posted by VictorT

Refer to http://garwarner.blogspot.com/2009/1...nel-phish.html for more info regarding companies that are targeted.

One of my question is, how did they create a subdomain on HostGator.com?

I'm sure they do not have any subdomain at hostgator. That is the mask you see

[ldcdc]

Originally Posted by SiberForum

I'm sure they do not have any subdomain at hostgator. That is the mask you see

Indeed, the typical phishing technique.

[cscarlet]

Since when has Dreamhost used cPanel?
I suppose it won't be long until scammers try to do the same to other Control Panel users

[Ramprage]

Prepare for a large number of hacked user accounts.

[MattS]

One great thing is when you do like PayPal, greet them by their first AND last name.