Re: .edu email phishing

[Rick Holland <rick.holland () UTDALLAS EDU>]

We got a similar phishing email about 2 weeks ago.

--
Rick Holland
rick {dot} holland {at} utdallas {dot} com
Senior Information Security Analyst
The University of Texas at Dallas
972.883.6827


Jimmy Kuo wrote:
> Was this a directed (against caltech.edu) attack or was this one of a
> family sent to other .edu lists?  Has anyone seen one like this for
> their school?
>
> The return address was actually set up for:
>
> ask.helpdesk0 () gmail com
>
> Jimmy
>
> > > ----- Original Message ----- From: "ADMIN HELPDESK"
> > > <helpdesk () caltech edu>
> > > To: <undisclosed-recipients:>
> > > Sent: Monday, March 31, 2008 12:39 PM
> > > Subject: VERIFY YOUR CALTECH.EDU EMAIL ACCOUNT NOW.
> > >
> > >
> > >
> > >
> > > Dear caltech.edu Email Account Owner,
> > >
> > > This message is from caltech.edu messaging center to all caltech.edu
> > > email
> > > account owners. We are currently upgrading our data base and e-mail
> > > account
> > > center. We are deleting all unused caltech.edu email accounts to
> > > create more
> > > space for new accounts.
> > >
> > > To prevent your account from being closed, you will have to update
> > > it below so
> > > that we will know that it's a present used account.
> > >
> > > CONFIRM YOUR EMAIL IDENTITY BELOW
> > >
> > > Email Username : .......... .....
> > > EMAIL Password : ................
> > > Date of Birth : .................
> > > Country or Territory : ..........
> > >
> > > Warning!!! Account owner that refuses to update his or her account
> > > within Seven
> > > days of receiving this warning will lose his or her account
> > > permanently.
> > >
> > > Thank you for using caltech.edu
> > > Warning Code:VX2G99AAJ
> > >
> > > caltech.edu Team
> > >
> > > www.caltech.edu
> > >
> > > Dear caltech.edu Email Account Owner,
> > >
> > > This message is from caltech.edu messaging center to all caltech.edu
> > > email
> > > account owners. We are currently upgrading our data base and e-mail
> > > account
> > > center. We are deleting all unused caltech.edu email accounts to
> > > create more
> > > space for new accounts.
> > >
> > > To prevent your account from being closed, you will have to update
> > > it below so
> > > that we will know that it's a present used account.
> > >
> > > CONFIRM YOUR EMAIL IDENTITY BELOW
> > >
> > > Email Username : .......... .....
> > > EMAIL Password : ................
> > > Date of Birth : .................
> > > Country or Territory : ..........
> > >
> > > Warning!!! Account owner that refuses to update his or her account
> > > within Seven
> > > days of receiving this warning will lose his or her account
> > > permanently.
> > >
> > > Thank you for using caltech.edu
> > > Warning Code:VX2G99AAJ
> > >
> > > caltech.edu Team
> > >
> > > www.caltech.edu


--
Rick Holland
rick {dot} holland {at} utdallas {dot} com
Senior Information Security Analyst
The University of Texas at Dallas
972.883.6827

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature