Re: .edu email phishing

["Logan, Kimberly (loganks)" <LOGANKS () UCMAIL UC EDU>]

We are receiving these emails at the University of Cincinnati and have sent
an alert to our university community letting them know that it is not
legitimate.

Kim

Kim Logan
Information Security Officer
CISSP
University of Cincinnati
(513)556-9070
kim.logan () uc edu

-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Jimmy Kuo
Sent: Tuesday, April 01, 2008 2:47 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] .edu email phishing

Was this a directed (against caltech.edu) attack or was this one of a family

sent to other .edu lists?  Has anyone seen one like this for their school?

The return address was actually set up for:

ask.helpdesk0 () gmail com

Jimmy

> > ----- Original Message -----
> > From: "ADMIN HELPDESK" <helpdesk () caltech edu>
> > To: <undisclosed-recipients:>
> > Sent: Monday, March 31, 2008 12:39 PM
> > Subject: VERIFY YOUR CALTECH.EDU EMAIL ACCOUNT NOW.
> >
> >
> >
> >
> > Dear caltech.edu Email Account Owner,
> >
> > This message is from caltech.edu messaging center to all caltech.edu
> > email
> > account owners. We are currently upgrading our data base and e-mail
> > account
> > center. We are deleting all unused caltech.edu email accounts to create
> > more
> > space for new accounts.
> >
> > To prevent your account from being closed, you will have to update it
> > below so
> > that we will know that it's a present used account.
> >
> > CONFIRM YOUR EMAIL IDENTITY BELOW
> >
> > Email Username : .......... .....
> > EMAIL Password : ................
> > Date of Birth : .................
> > Country or Territory : ..........
> >
> > Warning!!! Account owner that refuses to update his or her account
> > within Seven
> > days of receiving this warning will lose his or her account permanently.
> >
> > Thank you for using caltech.edu
> > Warning Code:VX2G99AAJ
> >
> > caltech.edu Team
> >
> > www.caltech.edu
> >
> > Dear caltech.edu Email Account Owner,
> >
> > This message is from caltech.edu messaging center to all caltech.edu
> > email
> > account owners. We are currently upgrading our data base and e-mail
> > account
> > center. We are deleting all unused caltech.edu email accounts to create
> > more
> > space for new accounts.
> >
> > To prevent your account from being closed, you will have to update it
> > below so
> > that we will know that it's a present used account.
> >
> > CONFIRM YOUR EMAIL IDENTITY BELOW
> >
> > Email Username : .......... .....
> > EMAIL Password : ................
> > Date of Birth : .................
> > Country or Territory : ..........
> >
> > Warning!!! Account owner that refuses to update his or her account
> > within Seven
> > days of receiving this warning will lose his or her account permanently.
> >
> > Thank you for using caltech.edu
> > Warning Code:VX2G99AAJ
> >
> > caltech.edu Team
> >
> > www.caltech.edu

Attachment: smime.p7s
Description: