Educause Security Discussion mailing list archives
Re: New e-mail attack using valid webmail accounts
From: Zach Jansen <zjanse20 () CALVIN EDU>
Date: Mon, 10 Mar 2008 10:08:42 -0400
When we saw this a few weeks ago it was a targeted attack. We received two rounds of phishing emails targeting our institution that were soliciting usernames and passwords. The phishing email itself was generic (Dear user) and had pretty poor grammar and spelling. It appeared to be one of two email that this particular attacker was using to gather accounts and the only part that changed was which "service team" the email was forged from. Anyone using a webmail account who responded had their account abused to send further phishing emails as well as various types of scam emails. Zach
On 3/7/2008 at 3:26 PM, in message
<0339279484D4314F90BBD1775E1F1EB905E1DD0A () cnex huc int>, "Bruggeman, John" <jbruggeman () HUC EDU> wrote:
Did you find out what account was compromised or who was sending the spam? What I'm wondering is if the attack was random or if someone targeted your site?
Current thread:
- New e-mail attack using valid webmail accounts Jenkins, Matthew (Mar 05)
- <Possible follow-ups>
- Re: New e-mail attack using valid webmail accounts John Ladwig (Mar 06)
- Re: New e-mail attack using valid webmail accounts Jenkins, Matthew (Mar 06)
- Re: New e-mail attack using valid webmail accounts Bradley, Stephen W. Mr. (Mar 06)
- Re: New e-mail attack using valid webmail accounts Michael H. Martel (Mar 06)
- Re: New e-mail attack using valid webmail accounts Jenkins, Matthew (Mar 06)
- Re: New e-mail attack using valid webmail accounts Jesse Thompson (Mar 07)
- Re: New e-mail attack using valid webmail accounts Jesse Thompson (Mar 07)
- Re: New e-mail attack using valid webmail accounts Bruggeman, John (Mar 07)
- Re: New e-mail attack using valid webmail accounts Jenkins, Matthew (Mar 10)
- Re: New e-mail attack using valid webmail accounts Zach Jansen (Mar 10)
- Re: New e-mail attack using valid webmail accounts Jenkins, Matthew (Mar 10)
- Re: New e-mail attack using valid webmail accounts Zach Jansen (Mar 14)
- New e-mail attack using valid webmail accounts Kenneth Arnold (Mar 14)
- Re: New e-mail attack using valid webmail accounts Brian Friday (Mar 14)
- Re: New e-mail attack using valid webmail accounts Jenkins, Matthew (Mar 14)
- Re: New e-mail attack using valid webmail accounts Curt Wilson (Mar 14)