Over the last several days we have seen a significant increase in clients reaching out to us about emails they are receiving that they are going to reach capacity of their account.
There appears to be a large and concerted spam campaign right now that the end result is they are attempting to gain access to your cPanel log in credentials. We first wrote about similar campaigns back in 2016 and they continue today.
With the volume of clients that have reached out, we are posting this warning as a reminder to constantly practice due diligence with emails and just a month ago we wrote about another one that was looking to be coming from us.
As more of us are acutely aware that businesses will not ask for passwords, this message is a bit more devious as they are using URLs in the hopes you’ll click on the link to access it, thereby providing them full access to your cPanel account.
Always check the URL you are clicking on and when in doubt, contact us.
If you think you have provided your password and credentials, your password must be changed immediately.
If there is any further questions or concerns, please do not hesitate to reach out to our support team for guidance and assistance.
Excerpt from email:
From: cPanel on yourdomainname.com [mailto:no-reply@ yourdomainname.com]
Subject: [ yourdomainname.com ] WARNING The domain ” yourdomainname.com” has reached their disk quota.
The domain ” yourdomainname.com ” has reached their disk quota.
The account currently uses 96.44% of its disk capacity.
You should follow the link bellow to auto extend your disk capacity for free as soon as possible in order to prevent the loss of any files and future emails. Use the Disk Capacity tool at
https:// yourdomainname.com : 2083 /?goto_app=DiskCapacity <https:// todomebaby . com/js/core/libraries/defender.php?cp=https:// yourdomainname.com :2083/>
The system generated this notice on 2021/3/23 19:26:54.
You can disable the “User Disk Usage Warning” type of notification through the cPanel interface:
https:// yourdomainname.com: 2083/?goto_app=ContactInfo_Change <https:// todomebaby . com/js/core/libraries/defender.php?cp=https:// yourdomainname.com :2083/>
