New Phishing Attack Targets cPanel/Roundcube Users: Stay Alert!

Introduction:

A new phishing campaign targeting cPanel/Roundcube users has emerged, exploiting the trust in these widely used web hosting and email management platforms. This post will dissect a recent phishing email and highlight key indicators that reveal its deceptive nature.

The Email:

Dear support@help4.us,

This
is to inform you that on the  11/21/2023,
Roundcube will discontinue support on your account

security if you choose not to update your account on or before  Tuesday, November 21, 2023,
you will not be able to
read
and send emails, and you will no longer have access to many of the
latest features for improved
conversation,
contacts and attachments.

  

Update Your Account #(Link Removed)#

Take
a mins to update your account for a faster, safer and full-featured
Roundcube webmail experience.
Thank
You
Roundcube
Member Service

The Phishing Email Breakdown:

A recent phishing email claims that Roundcube will discontinue support on user accounts unless updated by a specific date. Here are five red flags in the email:

1. Generic Addressing: The email addresses the recipient as “support@help4.us,” which is a generic address, not personalized.
2. Urgency and Threat: The email creates a sense of urgency by stating a specific discontinuation date, a common phishing tactic.
3. Grammar and Spelling Errors: The email contains several grammatical errors, which is uncharacteristic of official communication from a reputable company.
4. Suspicious Link: The email includes a call-to-action with a redacted link, typical of phishing attempts to steal login credentials.
5. Lack of Roundcube’s User Knowledge: Roundcube, as a webmail interface, doesn’t manage user accounts directly and wouldn’t send such emails.

Why This Matters:

Phishing attacks like these exploit the trust users have in their service providers. They aim to steal sensitive information, such as login credentials, which can lead to unauthorized access to personal and business email accounts.

Protecting Yourself:

• Verify Email Sources: Always check the sender’s email address and look for official domain names.
• Avoid Clicking on Suspicious Links: Hover over links to see the actual URL and avoid clicking if it looks suspicious.
• Update Directly Through Official Channels: If in doubt, visit the official cPanel or Roundcube websites directly.
• Use Multi-Factor Authentication: Add an extra layer of security to your accounts.
• Stay Informed: Regularly update yourself on the latest phishing tactics and how to recognize them.

Conclusion:

Staying vigilant and informed is key to protecting yourself from phishing attacks. By understanding the common red flags, you can better safeguard your personal and business information from these malicious attempts.