Amember Phishing Attempt

Protect yourself from attempts to compromise the security of your Amember script.

I received an email requesting me to immediately upgrade a copy of the Amember script. The weird thing was, the URL where I'm supposed to download the upgrade or patch is not at amember.com (the official site of Amember).

So I head on over to Amember.com and look for any announcements regarding this security patch.

As expected, there was no announcement.

After a few minutes, in comes this email from Amember.com warning us that they did not email any security upgrade announcement, and that people who did download the "patch" must uninstall it.

The lesson? Think twice before installing any so-called "security patches" because you just might end up compromising the security of your webserver, scripts, or database.

[ First posted on 10/23/2007 by Manuel Viloria ]