"Please confirm your FTP details" phishing emails

[NickFitz]

Got a web site? Watch out for a new phishing scam that attempts to get your FTP details. Currently targeting a long list of major hosting providers, using a CPanel front end (which is the same admin interface as used by a lot of such providers).

More details at the blog of Gary Warner, Director of the University of Alabama Birmingham Computer Forensics Research department.

Be careful out there

[DimPrawn]

Like who would send out their FTP details (login and password)?

Stupid people deserve to be hacked.

[bobhope]

The phisihing attempts certainly are becoming more professional. Before, I'd always think "who on earth would be fooled by something like that?"

Now, I can see many more people being fooled.

[NickFitz]

Like who would send out their FTP details (login and password)?

Stupid people deserve to be hacked.

Not "send out": the emails contain a link to a domain crafted to look like one belonging to the associated hosting provider, and uses the same user interface (incorporating the relevant branding) as you would normally see when going to your legitimate hosting control panel.

[DimPrawn]

Not "send out": the emails contain a link to a domain crafted to look like one belonging to the associated hosting provider, and uses the same user interface (incorporating the relevant branding) as you would normally see when going to your legitimate hosting control panel.

Still takes a lot of stupidity. Does the link go to my hosting provider's domain, no I don't think so.