We’ve received reports about a phishing email impersonating Runbox Support and trying to trick people into logging into their account from a fake mockup of the Runbox login page. The purpose of this is to steal user logins in order to send Nigerian-type scammer mails from the hijacked accounts.
The fake sender address of the message is firstname.lastname@example.org and the subject is You have 1 new Alert Message !. We have put in place a global filter to reject further messages of this sort, and are currently deleting all instances of it from the Runbox servers. If you still should have received the message, please just delete it.
The phishing site linked to in the message is now blocked in most browsers, but if you tried to log in from it earlier, please change your password immediately using the Account screen after logging in at www.runbox.com, and contact us afterwards.
As a general rule, always make sure you’re logging in at a official Runbox website (www.runbox.com). Please see the Phishing section of this article for more information.