Educause Security Discussion mailing list archives

Phishing emails


From: Russell Fulton <r.fulton () AUCKLAND AC NZ>
Date: Fri, 10 Jul 2009 05:18:47 +1200

Greetings

Our email logs show email being sent yesterday evening from your
account to the reply-to address in a recent scam which tried to dupe
people into disclosing their email usercode and passwords.

I am aware that this may be an 'out of office' response or something
else automated but I have no way of telling from the information I
have available so I have to

The email was blocked but you should be aware the these things are
scams.  You will never be asked to reveal your password by anyone who
is legitimate.

Never send your login credentials to any one by email or any other
means  and be very suspicious of emails that ask you to "verify" your
credentials by going to a web site. The chances are the web site is a
fake even if it looks the same as the usual one.    All UoA web sites
that ask for upi and password are encrypted (thy should display the
padlock symbol).



Cheers,

Russell Fulton
Information Security Officer

Current thread: