Educause Security Discussion mailing list archives

Re: FYI: Another round of spear Phishing


From: "J. Fowler" <fowler () CSUFRESNO EDU>
Date: Wed, 2 Jul 2008 10:06:26 -0700

Gasper, Rick wrote:
I want to ask a rather simple question: if a spear phisher gets the account info, does it really matter if they use 
Imap or pop to connect?

We are not witnessing them reading user email. They only seem interested
in sending mass amounts of 419 scams through smtp via webmail. They seem
to prefer webmail because it offers features like mail forwarding and
signature file customization. I'm not sure we've ever seen a connection
via pop or imap.

Current thread: