fascinating new scam going around for roundcube webmail admins; beware!!

if you use roundcube, chances are that bots have already been flooding your login page with attempts (this has already happened to me many times in the past, resulting in the service being blocked by my mail server).

assuming you use good passwords, this can be somewhat ignored. lately, i've now started receiving scam emails masquerading as system notifications (i don't use cpanel, and i receive notifications directly from email providers when my emails bounce!)

clicking the button will direct you to a fake login page (note; NOT on the domain where roundcube is actually set up) prompting you to log in. DO NOT DO THIS. THEY WILL STEAL YOUR CREDENTIALS. report the domain to its registrar so it can be terminated, and go on with your day.