Attention: Fake e-mails in circulation!
We would like to urgently warn our customers about a recent phishing campaign targeting Roundcube Webmail users. These fraudulent emails claim that you need to verify your email address in order to continue to have access to your account. The message contains a link that supposedly leads to verification. In reality, however, you will be redirected to a fake website designed to steal your login details.
The subject looks something like this:
[rand:Confirmation of your e-mail address required|Verify your RoundCube account information|Important security check of your account|Reply to e-mail confirmation required|Last reminder: e-mail verification open|Action required: Confirm your address|Security update of your RoundCube account|Request for verification of your e-mail address|Important message about your webmail]
Characteristics of the phishing e-mail
- Return address: The e-mail appears to come from "Roundcube Webmail", but it is fake!
- Subject lines: Typical subject lines are, for example, "Confirmation of your e-mail address required" or "Security check of your account".
- Contents: The message asks you to click on a link to confirm your e-mail address. There is a threat that the account will be blocked within 48 hours if no action is taken.
- Link: The included link leads you to an obscure website with the URL
webmail.roundcube.de-8080.com
This interface looks like a Roundcube mail client and you will be asked to log in here.
How to protect yourself:
- Do not click on links: Do not open any links in suspicious e-mails and do not enter any personal data.
- Check e-mail sender: Check the sender's address carefully - it often differs slightly from the official address.
- Log in directly: Always log in directly via the official website of your webmail service and not via links in e-mails.
- Report suspicious e-mails: Forward suspicious messages to your IT support or to abuse@roundcube.net continue.
A mail client like Roundcube and a reputable e-mail provider in general would NEVER ask you for your access data or ask you to verify your account information!
What to do if you have already clicked?
- Change your password immediately.
- Activate two-factor authentication (2FA) if available.
- Write to us at info@mainetcare.comso that we can take further measures.
Stay vigilant and protect your data! Share this warning with colleagues and friends to prevent further victims.
