Oct 8, 2010 Legacy

**IMPORTANT SECURITY ALERT**

It has been brought to our attention that a small percentage of our customers have received emails requesting login information from a source claiming to be Media Temple. This is part of a larger attack affecting several large webhosting providers at this time. This is clearly an attempt to retrieve passwords, which we would never solicit via email.

Many of you might ask “How did they get my email address?”.  These email contacts are most likely being pulled from WHOIS data — public information containing details of a domain registration. From this data, the attacker can easily determine the hosting provider. They then simply insert these details into an email “template” before sending them.

If you have responded to an email of this nature, from any company, immediately change your AccountCenter password to protect yourself. If this same password is shared with other accounts please take the appropriate steps to change those as well.

An example of the email we have seen is:

Hello,

We receive a complaint about phishing page in your web hosting account. The complaint came from Verisign inc. There is a page in your hosting account that collects personal account details and disguise as legitimate Lloyds TSB Bank PLC. That webpages have been broadly distributed to individuals by a person or entity pretending to be Lloyds TSB Bank PLC.

Please provide me with your hosting username and password so we can delete that phishing page from our server. Just reply this email with the information we needed so we can fix it immediately.

Thank you

(mt) Media Temple, Inc.
Patrick Rigney
Technical Support Manager
8520 National Blvd. Building A
Culver City, CA 90232
we appreciate your rapid response

We would like to reiterate that (mt) Media Temple follows the standard practice of NEVER requesting login information via email. Thank you for your cooperation and please contact us if you have any questions.

Best Regards,
(mt) Media Temple

About the Author More by this Author