According to this message, which purports to be from webmail software provider Roundcube, your email account needs to be updated with new security features.
The email urges you to click a button to accept the update. It warns that your mailbox will be disabled if you ignore the request.
However, the email is not from Roundcube and the claim that you must update to new security features is untrue. In fact, the email is a typical phishing scam designed to steal your email account login credentials.
If you fall for the ruse and click the update button, you will be taken to a fake webmail login page which asks for your email address and email password.
The details you supply can be collected by scammers and used to hijack your email account. Once they have gained access, the scammers can use your account to send spam, scam, and malware messages in your name. In some cases they may also be able to access related services that use the same login credentials.
Email phishing scams like this one are very common. Be cautious of any message that claims that you must click a link to install a security update, fix a supposed account problem, or verify your personal information.
It is always safer to log in to your email account by entering the address into your browser’s address bar or via a trusted app rather than by clicking a link or opening an attached file.
Editor’s Note: This example of the scam falsely claims to be from one of my own domains. Rather ironic given that I manage email for the domain myself and don’t use Roundcube. 🙂
A screenshot of the scam email:
Your email [removed] security features need to be updated with a new security features.
Kindly review your mail settings and accept our newly added security features by clicking below.
Your mailbox will be disabled for security reasons if you ignore this message.
We hope to serve you better.
 Security Service.
Customer Service Director