Sorry if this is off topic, but I think that wordpress owners who are confused about the flurry of recent security issue might be more susceptible to this type of phishing scam.
I saw this email - purpotedly from my hosting company - when I checked my email this morning:
Your account contains more than 9860 directories and may pose a potential performance risk to the server. Please reduce the number of directories for your account to prevent possible account deactivation. In order to prevent your account from being locked out we recommend that you create special tmp directory. Or use the link below:
[BOGUS LINK HERE]
Like most others, I have been a LITTLE paranoid - and more than a little confused - about security issues in wordpress lately, so I freaked out when I read it. I figured that my wordpress install had been hacked, and that I would be spending the rest of the day trying to remove the mlalware from my sites.
Now normally, I would be hyper-vigilant about NOT clicking on such links. But I ALMOST did today just because of the recent wordpress security confusionment has me bewildered. Am I protected? Am I not protected?
Anyway, sorry if this is off topic, but I just hope that it will help those who have wordpress sites be a little more vigilant in avoiding phishing scams.