I have some web space that I use for a testing ground for other sites I am working on. I received this email the other day: To Whom It May Concern: I am writing on behalf of Lloyds TSB Bank PLC (the Bank), a well known and internationally respected bank whose headquarters are in London. It has come to our attention that you are hosting a fraudulent "phish" website that is attempting to steal bank account information from customers of Lloyds TSB Bank PLC. The URL of the fraudulent site is as follows: http://www.XXXXXXXXX.com/cgibin/www.lloydstsb.com/online.lloydstsb.co.uk/customer.ibc/customer.ibc.htm (the Website) The IP address hosting this phish is 62.149.36.23. The site contains logos and trademarks which are the same as the Bank's trademarks and the look and feel is sufficient to lead users to believe that the Website is being operated by the Bank. However, the Website has not been approved and we reasonably believe that it is the intention of the owners to use as an instrument of fraud. In the interests of protecting our customers and the wider public from potentially fraudulent actions we ask that you take immediate action to close the website. Please confirm that the phish has been closed. Should you have any questions, please call us at +1-301-216-2582. Yours faithfully, Tim Lagundo MM Ops Centre For and on behalf of Lloyds TSB Bank PLC Now the link doesn't take you anywhere, but when I checked there is now a folder called "cigbin" on my database. I have tried deleting it, and accessing it, but I am denied all permissions. What should I do? Thanks in advance.
You should reply to the banks email telling them the link wasn't created by you, it currently doesn't go anywhere, but you intend to remove it anyway. And then contact your hosting company and ask them to remove the cigbin folder for you if you can't delete it yourself.
First change your CP password to avoid invalid accessing to your hosting CP and then contact your hosting company to check this issue.