False security email scam

FALSE SECURITY EMAIL SCAM

[02/08/2007]

This is a security announcement. Note that today we have been informed from numerous of our clients receiving FALSE e-mail notifications for domain names hosted on SupremeCenter43. The e-mails’ subject is “Hosting Regular Security Maintenance”. The purpose of this e-mail is to trick you to install a malicious script/software in your hosting account. These are NOT an e-mail coming or associated with us in any way. This is scam e-mail. IF you receive such an e-mail delete it at once. If you do not download the file than no harm will be done to you or your account.

Here is a copy of the spoof email:

Quote:
Reply-To: security.admin@supremecenter43.com
Subject: Hosting Regular Security Maintenance
Date: Thu, 08 Feb 2007 00:20:54 -0800
Dear supremecenter43 valued Members

Regarding our new security regulations, as a part of our yearly maintenance we have provided a security guard script in the attachment.

So, to secure your websites, please use the attached file and (for UNIX/Linux Based servers) upload the file “guard.php” in: “./public_html” or (for Windows Based servers which use ASP) upload the file ” guard.asp” in:

“./wwwroot” in your site.
If you do not know how to use it, you can use the following instruction:

For Unix/Linux based websites that use PHP/CGI/PERL:
1) Download the attachment named ” guard.zip”
2) Extract file “guard.php”
3) Login to your site Control panel.
4) Open “File Manager” window.
5) Go through “Public_html” or “htdocs”
6) Choose “Upload Files”
7) Upload the file “guard.php”
Check its URL too “http://www.yoursite.com/guard.php”, if it is ok

For Windows based websites that use ASP:
1) Download the attachment named “guard.zip”
2) Extract file “guard.asp”
3) Login to your site Control panel.
4) Open “File Manager” window.
5) Go through “wwwroot” directory
6) Choose “Upload Files”
7) Upload the file “guard.asp”
Check its URL too “http://www.yoursite.com/guard.asp”, if it is ok

Thank you for using our services and products. We look forward to providing you with a unique and high quality service.

Best Regards

supremecenter43 Inc

http://www.supremecenter43.com

This e-mail is broadcasted to the e-mails that are visible in the WHOIS for the domain names hosted on SupremeCenter43.com. Our administrators are currently working on improving the security of our servers to further prevent such things from occurring again. The email is being sent to the email address provided in the WHOIS of domains, hosted on our servers. Our administrators are currently working on improving our servers’ security to avoid such incidents in the future.

We all know spammers are persistent folk, but it always pays off if we are all a bit more cautious as to what we download and install. We believe we all learn from our mistakes, and that is one we all have made in the past.