Be on the lookout for a FAKE security patch email

[goodiesnthings]

I just got this email:

New dangerous magento XSS vulnerability

Wed 6/7/2017 12:16 PM

From: marc@securi.ltd

During our regular research audits for our Cloud-based WAF, we discovered a Stored XSS vulnerability affecting the Magento platform that can be easily exploited remotely. We notified the Magento team and worked with them to get it fixed. We create Magento security patches.

Information about XSS vulnerability and instructions for fix in our site: https://securi.ltd/security-advisory-stored-xss-in-magento.html.

FAKE site: https://securi.ltd/security-advisory-stored-xss-in-magento.html

http://whois.domaintools.com/securi.ltd - site just went live yesterday

[Tom Robertshaw · Accepted solution]

Thanks for letting us know. It looks like this site has been removed since this was posted.