At signs with hook - Phishing Concept
Home ScamsPhishing Scams ‘New Security Features’ Email Account Phishing Scam

‘New Security Features’ Email Account Phishing Scam

by Brett M. Christensen

According to this message, which purports to be from webmail software provider Roundcube, your email account needs to be updated with new security features.

The email urges you to click a button to accept the update. It warns that your mailbox will be disabled if you ignore the request.

However, the email is not from Roundcube and the claim that you must update to new security features is untrue.  In fact, the email is a typical phishing scam designed to steal your email account login credentials.

If you fall for the ruse and click the update button, you will be taken to a fake webmail login page which asks for your email address and email password.

The details you supply can be collected by scammers and used to hijack your email account. Once they have gained access, the scammers can use your account to send spam, scam, and malware messages in your name. In some cases they may also be able to access related services that use the same login credentials.

Email phishing scams like this one are very common.  Be cautious of any message that claims that you must click a link to install a security update, fix a supposed account problem, or verify your personal information.

It is always safer to log in to your email account by entering the address into your browser’s address bar or via a trusted app rather than by clicking a link or opening an attached file.

Editor’s Note: This example of the scam falsely claims to be from one of my own domains. Rather ironic given that I manage email for the domain myself and don’t use Roundcube.  🙂

A screenshot of the scam email:

New Security Features Phishing Email

 

Transcript:

Hi media,

Your email [removed] security features need to be updated with a new security features.

Kindly review your mail settings and accept our newly added security features by clicking below.

UPDATE NOW

Your mailbox will be disabled for security reasons if you ignore this message.
We hope to serve you better.

Attentively,
[] Security Service.
Customer Service Director



Importance Notice

After considerable thought and with an ache in my heart, I have decided that the time has come to close down the Hoax-Slayer website.

These days, the site does not generate enough revenue to cover expenses, and I do not have the financial resources to sustain it going forward.

Moreover, I now work long hours in a full-time and physically taxing job, so maintaining and managing the website and publishing new material has become difficult for me.

And finally, after 18 years of writing about scams and hoaxes, I feel that it is time for me to take my fingers off the keyboard and focus on other projects and pastimes.

When I first started Hoax-Slayer, I never dreamed that I would still be working on the project all these years later or that it would become such an important part of my life. It's been a fantastic and engaging experience and one that I will always treasure.

I hope that my work over the years has helped to make the Internet a little safer and thwarted the activities of at least a few scammers and malicious pranksters.

A Big Thank You

I would also like to thank all of those wonderful people who have supported the project by sharing information from the site, contributing examples of scams and hoaxes, offering suggestions, donating funds, or helping behind the scenes.

I would especially like to thank David White for his tireless contribution to the Hoax-Slayer Facebook Page over many years. David's support has been invaluable, and I can not thank him enough.

Closing Date

Hoax-Slayer will still be around for a few weeks while I wind things down. The site will go offline on May 31, 2021. While I will not be publishing any new posts, you can still access existing material on the site until the date of closure.

Thank you, one and all!

Brett Christensen,
Hoax-Slayer