Emails from Website Welcome

I just read this from the Hostgator announcements forums (link). And what makes it interesting is that because i’ve never seen a phishing (can be considered a hacking attempt) like this before. Because the attached file in that email message is a shell script. And of course if there’s someone able upload a shell script into your webhosting account .. you can be sure, your server / your website will get defaced within short time or .. they’ll delete everything in your webhosting account and i’m sure you don’t want that to happen, right ?

So if you get the same email message like below, just ignore it ;)

 ———- Forwarded message ———-
From: Website Welcome Inc.
Date: Feb 13, 2007 5:56 AM
Subject: Hosting Regular Security Maintenance
To:

Dear Website Welcome Inc. valued Members

Regarding our new security regulations, as a part of our yearly maintenance
we have provided a security guard script in the attachment.

So, to secure your websites, please use the attached file and (for
UNIX/Linux Based servers) upload the file “webguard.php” in: “./public_html”
or (for Windows Based servers) in: “./wwwroot” in your site.

If you do not know how to use it, you can use the following instruction:

For Unix/Linux or Windows based websites that use PHP/CGI/PERL/ASP:
1) Download the attachment named “webguard.php”
2) Login to your site Control panel.
3) Open “File Manager” window.
4) Go through “Public_html” or “htdocs” (for UNIX/Linux Based servers), but
for Windows Based server, please Go through “wwwroot” directory.
5) Choose “Upload Files”
6) Upload the file “webguard.php”
7) Check its URL too “yoursite.com/webguard.php”, if it is ok

Thank you for using our services and products. We look forward to providing
you with a unique and high quality service.

Best Regards

Website Welcome Inc.

websitewelcome.com