{"id":202,"date":"2009-08-17T20:20:15","date_gmt":"2009-08-17T20:20:15","guid":{"rendered":"https:\/\/blogs.swarthmore.edu\/its\/?p=202"},"modified":"2009-08-17T20:20:15","modified_gmt":"2009-08-17T20:20:15","slug":"phishing-examples","status":"publish","type":"post","link":"https:\/\/blogs.swarthmore.edu\/its\/2009\/08\/17\/phishing-examples\/","title":{"rendered":"Phishing Examples"},"content":{"rendered":"<p style=\"text-align: left;\"><a title=\"Phishing Definition\" href=\"http:\/\/en.wikipedia.org\/wiki\/Phishing\" target=\"_blank\">Phishing<\/a> is a common experience for email users these days. Swarthmore email users often receive requests for their network\/email passwords, user IDs, and other private data. Some of these emails can be very convincing and appear to be from Swarthmore ITS Staff.<\/p>\n<div style=\"text-align: left;\">However, you should know that ITS will <span style=\"color: #ff0000;\"><strong>never<\/strong><\/span>, ever request your password!? Emails requesting your password or other personal data should simply be <span style=\"text-decoration: underline;\">deleted<\/span> upon receipt.<\/div>\n<p>Below are some different types of phishing emails received here at Swarthmore:<\/p>\n<p><code><span style=\"color: #000000;\">&lt;!--more--&gt;<\/span><\/code><\/p>\n<p><span style=\"font-family: courier new,courier;\"><strong><a name=\"examples\"><\/a>Subject: Dear swarthmore.edu Email Account Owner<\/strong><br \/>\nFrom: Admin Help Desk<br \/>\nDate: November 28, 2008 6:41:35 AM EST<br \/>\nTo: xxx@swarthmore.edu<br \/>\nReply-To: adminhelpdesk4@gmail.com<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">VERIFY YOUR SWARTHMORE.EDU EMAIL ACCOUNT NOW..<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">Dear swarthmore.edu Email Account Owner,<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">This message is from swarthmore.edu messaging center to all swarthmore.edu email account owners. We are currently upgrading our data base and e-mail account center. We are deleting all unused swarthmore.edu  email accounts to create more space for new accounts.<br \/>\nTo prevent your account from being closed, you will have to update it below so that we will know that it&#8217;s a present used account.<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">CONFIRM YOUR EMAIL IDENTITY BELOW<br \/>\nEmail Username : &#8230;&#8230;&#8230;. &#8230;..<br \/>\nEMAIL Password : &#8230;&#8230;&#8230;&#8230;&#8230;.<br \/>\nDate of Birth : &#8230;&#8230;&#8230;&#8230;&#8230;..<br \/>\nCountry or Territory : &#8230;&#8230;&#8230;.<br \/>\nWarning!!! Account owner that refuses to update his or her account within Seven days of receiving this warning will lose his or her account permanently.<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">Thank you for using swarthmore.edu<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">Warning Code:VX2G99AAJ<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">swarthmore.edu Team<br \/>\nwww.swarthmore.edu<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\"> <\/span><\/p>\n<hr \/>\n<p><strong>Subject: UPGRADE YOUR SWARTHMORE.EDU E-MAIL ACCOUNT.<\/strong><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-family: courier new,courier;\">From: &#8220;swarthmore.edu Web-Administrador&#8221;<br \/>\nReply-To: helpdesk89@live.com<br \/>\nTo: undisclosed-recipients:;<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">Dear Account User,<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">Your email account needs to be upgraded to our new F-Secure R-HTK4S anti-virus\/anti-spam 2009 version.<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">All you have to do is to click reply and fill the column below, then click send; our webmail Team will upgrade your account. Failure to do this, your account will be suspended temporarily from our services.<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">user ID:<br \/>\nPassword:<br \/>\nPHONE NUMBER:<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">Thank you for your cooperation!<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">swarthmore.edu Web-Administrador<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">https:\/\/swatmail.swarthmore.edu\/nutsmail\/src\/login.php<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\"> <\/span><\/p>\n<hr \/>\n<p><strong><span style=\"font-family: courier new,courier;\">Subjetc: Webmail Users Maintenance Notice.<\/span><\/strong><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-family: courier new,courier;\">From: &#8220;WebMail Maintenance Service&#8221;<br \/>\nDate: July 9, 2009 12:45:57 AM EDT<br \/>\nTo: undisclosed-recipients:;<br \/>\nSubject: Webmail Users Maintenance Notice.<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">Webmail Users Maintenance Notice.<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">This message was sent automatically by a program on Webmail which periodically checks the size of inboxes, where new messages are received. The program is run weekly to ensure no one&#8217;s inbox grows too large. If your inbox becomes too large, you will be unable to receive new email. Just before this message was sent, you had 18 Megabytes (MB) or more of messages stored in your inbox on your Webmail, to help us reset your SPACE on our database prior to maintain your INBOX, you must reply to this E-mail and enter your:<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">Current User name:{ } and Password: { }<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">You will continue to receive this warning message periodically if your inbox size continues to be between 18 and 20 MB. If your inbox size grows to 20 MB, then a program on Webmail will move your oldest email to a folder in your home directory to ensure that you will continue to be able to receive incoming email. You will be notified by email that this has taken place. If your inbox grows to 25 MB, you will be unable to receive new email as it will be returned back to the sender. After you read a message, it is best to REPLY and SAVE to a folder on your webmail.<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">Thank you for your cooperation.<br \/>\nWebMail Maintenance Service. <\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\"> <\/span><\/p>\n<hr \/>\n<p><strong>Subject: Your mailbox has exceeded the storage limit.<\/strong><br \/>\nFrom:    &#8220;Bell, William C&#8221;<br \/>\nDate:    Thu, April 16, 2009 19:13<br \/>\nTo:      undisclosed-recipients:;<\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-family: courier new,courier;\">Dear Webmail User,<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">This message was sent automatically by a program on Webmail which periodically checks the size of inboxes, where new messages are received. Your mailbox has exceeded the storage limit set by your administrator. You may not be able to send or receive new mail until your mailbox size is increased by your system administrator.<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">To help us re-set your SPACE on our database prior to maintain your INBOX,you must contact your system administrator by replying this e-mail and enter your: Current Username: { } and PW: { } to increase your storage limit.<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">The Information above should be sent to: helpdesk.webs05@live.com<br \/>\nYou will continue to receive this warning message periodically if your inbox size continues to exceed its size limit or between 18 and 20 MB.<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">Thank you for your cooperation.<br \/>\nSystem Administrator<br \/>\nhelpdesk.webs05@live.com<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">This email is intended only for the use of the individual or entity to which it is addressed and contains information that is privileged and confidential.<\/span><\/p>\n<hr \/>\n<p><strong><span style=\"font-family: courier new,courier;\">Subject: Mailbox Shutdown Notification<\/span><\/strong><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-family: courier new,courier;\">From: &#8220;Webmaster&#8221;<br \/>\nDate: March 26, 2009 12:09:58 PM EDT<br \/>\nTo: undisclosed-recipients:;<br \/>\nReply-To: <\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">You are expected to verify your email account to avoid mailbox shutdown by furnishing us with the following detials :<br \/>\nLogin Username:<br \/>\nLogin password: **************<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">To avoid shutting down of your mailbox which could lead to loss of your important files on our server,you must send these details on receipt of this message.<br \/>\nThank you very much.<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">Webmaster<br \/>\n<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\"><br \/>\n<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\"> <\/span><\/p>\n<hr \/>\n<p><strong>Subject: ATTN: EDU WEBMAIL SUBSCRIBER<\/strong><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-family: courier new,courier;\">From:<br \/>\nDate: April 15, 2009 12:30:48 AM EDT<br \/>\nTo: undisclosed-recipients:;<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">ATTN: EDU WEBMAIL SUBSCRIBER:<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">This mail is to inform all our {EDU WEBMAIL} users that we will be upgrading our site in a couple of days from now. So you as a Subscriber of our site you are required to send us your Email account details so as to enable us know if you are still making use of your mail box.<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">Further informed that we will be deleting all mail account that is not functioning so as to create more space for new user. so you are to send us your mail account details which are as follows:<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">*User name:<br \/>\n*Password:<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">Failure to do this will immediately render your email address deactivated from our database. Your response should be send to the following e-mail address.<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">Your Admin Manager: information@oneworld-post.com<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">Yours In Service.<br \/>\nMrs Sarah Elrays<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">FROM THE EDU WEBMAIL SUPPORT TEAM<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">CONFIDENTIALITY:  This e-mail (including any attachments) may contain confidential, proprietary and privileged information, and unauthorized disclosure or use is prohibited.  If you received this e-mail in error, please notify the sender and delete this e-mail from your system.<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">You are the Key to Information Security<\/span><\/p>\n<hr \/>\n<p><strong><span style=\"font-family: courier new,courier;\">Subject: Mailbox Validation.<\/span><\/strong><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-family: courier new,courier;\">Attn: Faculty\/Staff\/Students,<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">This is to inform you that your mailbox will soon be de-activated by your System Administrator due to an unusual activity detected in your mailbox. We noticed that webmail account has been compromised by spammers. It seems they have gained access to webmail accounts and have been using it for illegal internet activities.<br \/>\nThe center is currently performing maintenance and upgrading it&#8217;s data base. We intend upgrading our Email Security Server for better online services hence you may not be able to receive new mail until your mailbox is upgraded. Please Click the link below to validate your mailbox and upgrade your account.<br \/>\nhxxp:\/\/www.xavi01.byethost12.com\/feedback09\/feedback.html<\/span><\/p>\n<p><span style=\"font-family: courier new,courier;\">If your mailbox becomes de-activated for an extended period of time, it may result in further limitations or eventual closure of your mailbox.<br \/>\nThe information contained in this e-mail may be confidential and is intended solely for the use of the named addressee. Access, copying or re-use of the e-mail or any information contained herein by any other person is not authorized.<\/span><\/p>\n<p>For more information on regarding Email at Swarthmore, visit the <a title=\"Email\" href=\"http:\/\/www.swarthmore.edu\/x12422.xml\">ITS site<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Phishing is a common experience for email users these days. Swarthmore email users often receive requests for their network\/email passwords, user IDs, and other private data. Some of these emails can be very convincing and appear to be from Swarthmore ITS Staff. However, you should know that ITS will never, ever request your password!? Emails requesting your password or other personal data should simply be deleted upon receipt. Below are some different types of phishing emails received here at Swarthmore: &lt;!&#8211;more&#8211;&gt; Subject: Dear swarthmore.edu Email Account Owner From: Admin Help Desk Date: November 28, 2008 6:41:35 AM EST To: xxx@swarthmore.edu &hellip; <a href=\"https:\/\/blogs.swarthmore.edu\/its\/2009\/08\/17\/phishing-examples\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Phishing Examples<\/span><\/a><\/p>\n","protected":false},"author":41,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[112,96],"tags":[],"class_list":["post-202","post","type-post","status-publish","format-standard","hentry","category-email","category-security"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/ph2nPL-3g","_links":{"self":[{"href":"https:\/\/blogs.swarthmore.edu\/its\/wp-json\/wp\/v2\/posts\/202","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.swarthmore.edu\/its\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.swarthmore.edu\/its\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.swarthmore.edu\/its\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.swarthmore.edu\/its\/wp-json\/wp\/v2\/comments?post=202"}],"version-history":[{"count":18,"href":"https:\/\/blogs.swarthmore.edu\/its\/wp-json\/wp\/v2\/posts\/202\/revisions"}],"predecessor-version":[{"id":210,"href":"https:\/\/blogs.swarthmore.edu\/its\/wp-json\/wp\/v2\/posts\/202\/revisions\/210"}],"wp:attachment":[{"href":"https:\/\/blogs.swarthmore.edu\/its\/wp-json\/wp\/v2\/media?parent=202"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.swarthmore.edu\/its\/wp-json\/wp\/v2\/categories?post=202"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.swarthmore.edu\/its\/wp-json\/wp\/v2\/tags?post=202"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}