Sensei
- Join Date:
- Jan 2004
- Posts:
- 63,513
- Plugin Contributions:
- 176
Warning: Fake solicitation about upgrades for pci compliance and crypto
WARNING: there's a company masquerading as Zen Cart, but which is NOT.
They are telling people that mandatory upgrades are required, and they are stealing peoples' FTP credentials.
One brand name they're using is: https:// pcidss - compliance .com
**THEY ARE NOT RELATED TO ZEN CART IN ANY WAY.
**
Their emails contain text like the following WHICH IS FRAUDULENT and MISREPRESENTING:
scammers!:
Zen Cart Pending Update
Zen Cart is a leading e-Commerce Services company delivering online stores technology for a better management.
Being one of the world's leading e-commerce platform requires unrivalled vision, innovation and execution. We never settle: in everything we do, we challenge our ideas of what's possible in order to better meet the needs of our customers.
Your online business security is a shared responsibility between our company and you.
Based on this philosophy, Zen Cart advises you to update your online store to the last version available. Verify the update details below:
Registered Domain: (your domain here)
Current Crypto Module: Zen Cart 2.8.5 (TLS v1.2/2008)
New Crypto Module: Zen Cart 2.9.1 (TLS v1.3/2018)The update is free and fixes performance and security issues.
This is a mandatory update to maintain in force industry standards like PCI-DSS and others.
Keeping your business healthy and safe is one of our top priorities.Zen Cart is a Registered Trademark
Once again, they are a FAKE. They have NO legitimate relationship with Zen Cart or Zen Ventures, LLC.
.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.