Latest attempt actually comes from an internal email address. Guessing the student responded to the last attempt, provided info, and got his account hacked. That account is now being used to try and get more information. The email contains a link that redirects a few times before loading a page that asks for user ID and password. I have not seen said page, but I'm guessing it has at best crappy reproductions of our graphic identity, but more likely, just a very generic web page. At least one person has not only clicked the link (sent by a random student) and provided the requested information. Professor Moron then calls complaining that the Sent Items folder in his mailbox is filling up with messages that he did not send, and is outraged that we cannot force the spam bot out of his account.
Are we sure this is a technical university?
Wednesday, July 21, 2010
Tuesday, July 13, 2010
Seriously
If a random person walks up to you and says "give me your passwords or your account will be disabled, are you really going to just say "Sure. Here's all my personal information"? C'mom people. Some of you really are rocket scientists. A little common sense is all we need here.
Also, a snarky "No, I'm not providing you any information" in a reply to a phishing email will also get your password scrambled. And now the spammer has your correct email address, and knows that account is valid, even if they don't have your password. How long do you think it would take them to break your password?
Also, a snarky "No, I'm not providing you any information" in a reply to a phishing email will also get your password scrambled. And now the spammer has your correct email address, and knows that account is valid, even if they don't have your password. How long do you think it would take them to break your password?
Monday, July 12, 2010
Still sounds phishy...
New phishing scam today.
Attention:
User Quarantine Notification
A mail box user quarantine exercise is currently going on. we are carrying out a (inactive email-accounts / spam protecting) clean-up process to enable service upgrade efficiency.
Please be informed that we will delete all mailbox accounts that do not adhere to this notice. You are to provide your email account details for Quarantine exercise and protection against spammers/hackers by clicking your reply button and reply to this email as follows (This will confirm your MST mailbox login/usage Frequency):
* Account Login id.:
* Password:
* Account Creation Date:
All IT utilities will not change during this period, This will not affect the operation of your mail box systems or the manner in which you currently login to your mailbox. Email access and usage will be disabled if you fail to comply with the above.
Still fairly obvious. Last time I looked we had no offices in Claremont, Ca. Who the heck knows when their account got created? Did you notice that the actual email address you are replying to is a gmail address? Lastly, NO IT DEPARTMENT (at least a reputable one, anyway) WILL EVER ASK FOR YOUR PASSWORD. ESPECIALLY THROUGH EMAIL. We might ask if you know what is if you are having problems logging in, and we can tell via a counter if you are not using a correct one. We cannot see your password, and we do not want to know. Now, for that 50 or so of you that actually replied and sent your password, you deserve what you get. Go change your password before it gets worse. Morons.
Attention:
User Quarantine Notification
A mail box user quarantine exercise is currently going on. we are carrying out a (inactive email-accounts / spam protecting) clean-up process to enable service upgrade efficiency.
Please be informed that we will delete all mailbox accounts that do not adhere to this notice. You are to provide your email account details for Quarantine exercise and protection against spammers/hackers by clicking your reply button and reply to this email as follows (This will confirm your MST mailbox login/usage Frequency):
* Account Login id.:
* Password:
* Account Creation Date:
All IT utilities will not change during this period, This will not affect the operation of your mail box systems or the manner in which you currently login to your mailbox. Email access and usage will be disabled if you fail to comply with the above.
Still fairly obvious. Last time I looked we had no offices in Claremont, Ca. Who the heck knows when their account got created? Did you notice that the actual email address you are replying to is a gmail address? Lastly, NO IT DEPARTMENT (at least a reputable one, anyway) WILL EVER ASK FOR YOUR PASSWORD. ESPECIALLY THROUGH EMAIL. We might ask if you know what is if you are having problems logging in, and we can tell via a counter if you are not using a correct one. We cannot see your password, and we do not want to know. Now, for that 50 or so of you that actually replied and sent your password, you deserve what you get. Go change your password before it gets worse. Morons.
Subscribe to:
Posts (Atom)