Trusteer has warned [PDF file] of a new phishing attack that asks Web hosting customers to confirm their account information.

“The phony e-mails ask for FTP account credentials and other sensitive data,” according to SearchSecurity.com. “Once the information is passed on to the cybercriminals, they use the stolen account data to set up fake Web site bank pages to steal funds.”

“Trusteer said in addition to FTP credentials, the e-mail requests cPanel login information… Once in control, the cybercriminals can upload content, including malicious code,” the article adds.

Click here to read the SearchSecurity.com story.