Scam??? Or security fix from Verisign?

[YesBrilliant]

I just received this email that seemed perfectly coming from Verisign.

However, it seems very suspicious specially because of the attachment.

Did you receive it as well?

Here is the full copy of the email I received (except my email):

-----------------------------------------------------------

Verisign Inc. ([email protected]) +Add contact
Reply-To:[email protected]
To: my email
Subject: Hosting Regular Security Maintenance

Attachments: Security scan upon download guard.php (157.1 KB)

Dear FDIC valued Members

Regarding our new security regulations, as a part of our yearly maintenance we have provided a security guard script in the attachment.

So, to secure your websites, please use the attached file and (for UNIX/Linux Based servers) upload the file "guard.php" in: "./public_html" or (for Windows Based servers) in: "./wwwroot" in your site.

If you do not know how to use it, you can use the following instruction:

For Unix/Linux or Windows based websites that use PHP/CGI/PERL/ASP:
1) Download the attachment named "guard.php"
2) Login to your site Control panel.
3) Open "File Manager" window.
4) Go through "Public_html" or "htdocs" (for UNIX/Linux Based servers), but for Windows Based server, please Go through "wwwroot" directory.
5) Choose "Upload Files"
6) Upload the file "guard.php"
7) Check its URL too "http://www.yoursite.com/guard.php", if it is ok

Thank you for using our services and products. We look forward to providing you with a unique and high quality service.

Best Regards

Verisign Inc
http://www.verisign.com
Address:487 E. Middlefield Rd.
Mountain View, CA 94043
--------------------------------------------------------------------

Thanks for looking.

 

[lazyleo]

SCAM SCAM SCAM!

I read on another forum the same email but from DomainSponsor both are scams! this script sends your username and password to a gmail account. Report this to verisign.

 

[maximum]

When anyone (or some nut pretending to be anyone) ask you to do something you are not sure about, give it time to sink in why they may be asking. On this one, the first thought that would cross my mind (I run dedicated servers hosting others, so that may be an edge realizing the possibility here...but, this is not rocket science IMHO), is why would Verisign ask you do do this? To wit:

1) If they are sending it to you, and you use products from them that had security issues, would they not just ask you to upgrade the product itself? And no explaination what the issue/risk were with more info linking direcly to thier website?
2) If you use them for hosting (I assume the case here), why wouldn't they just install or run such tests themselves?

As Kenny G pointd out, I'd definetly forward this (with full email headers) to Verisign. They jusy :hearts: dealing with such scam artists/tricksters (ie: They often take pride in doing some anti-scammer :kickass: ), and are good at turning the tables on these type characters.

 

[YesBrilliant]

Thanks a lot Lazyleo and Maximum.

No, I do not use Verisign products and did not install or even open the attachment.

Yes, I'll certainly forward it to - the real - Verisign.

My intention here was to confirm it and alert other members.

Thanks again.