|Affected||Users of Science mail, specifically of horde webmail|
The last few days three Science users have supplied their Science password to phishers. We notice that because Internet criminals use these passwords to get into the Science mail servers (horde webmail, smtp) in order to send spam. This time they even used a fake copy of the horde Science webmail website. The big differences with the real horde Science webmail website are:
- the URL is not within science.ru.nl
- the connection is not a secure https connection, there is no lock
- the username and password do not arrive at C&CZ servers, but in the hands of Internet criminals.
PLEASE: do not naively click on a link in an e-mail!