HOLY SH*T. 2 DAYS AFTER PHP2SHELL MY INBOX GOT 24 EMAILS ABOUT IT. MY GROK BOT CHECKED EVERY SENDER. 20 WERE FAKE "RESET YOUR PASSWORD" TRAPS php2shell is real and a lot of small sites patched or went offline this week. scammers are riding the news what the fakes looked like: - a "security team" email from a shop i use, with "-support" added to its name - a "php2shell check" address asking for my card details - the pizza place i order from, with a dash where the dot should be - a "security fix" attached as a file to run the 4 real ones came from the sites' own addresses and asked me to do nothing how the bot checks each one: 1. reads the sender address letter by letter 2. compares it with the site i actually have an account on 3. looks where the reset button really leads 4. moves fakes to a folder and opens no links copy this: "Check every email this week that mentions PHP2Shell, a hack or a password reset. Compare the sender address and the link with the real site I have an account on. Move fakes to a folder. Don't open any links." your parents are getting these too. send them this one everything i run is in the article ↓