Re: Degreedup.org - phishing scam or just junk mail?

[Bob Bayn <bob.bayn () USU EDU>]

Our DegreedUp spam for May came from tccd.edu as well.  But their spam for April came from 
rrcs-50-84-44-66.sw.biz.rr.com (50.84.44.66).  Their website and spammed pdf look like they are from the same designer 
as the collegegreekbooks.com spam about Hazing Awareness last fall.

Interestingly, a google search for DegreedUp at tccd.edu doesn't return any hits.  I wonder if they know they are the 
source of the spam?  They haven't been taken in by it.

Bob Bayn              (435)797-2396           IT Security Team
Office of Information Technology,     Utah State University


________________________________________
From: The EDUCAUSE Security Constituent Group Listserv [SECURITY () LISTSERV EDUCAUSE EDU] on behalf of Robert Lau 
[rslau () USC EDU]
Sent: Monday, April 30, 2012 2:46 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Degreedup.org - phishing scam or just junk mail?

They spammed us from tccd248-180.tccd.edu (Tarrant County College District.  Fort Worth, TX).  So if there was any 
doubt of their
illegitimacy...

  Received Time:        28 Apr 2012 12:03:46 (GMT -07:00)
  Message Size:         63.32 (KB)
  Subject:              Student Scholarship (May 27th Deadline)
  Envelope Sender:      kmwilson () degreedup org
  Envelope Recipients:  x () usc edu
  Message ID Header:    <p38067 () degreedup org>
  Reverse DNS Hostname: tccd248-180.tccd.edu (verified)
  IP Address:           64.28.248.180

DegreedUp.org has the same address as another site that we blocked a while ago for massive spamming, 
collegegreekbooks.org
[209.190.30.58].  We mailed complaints to their hosting company, AlphaNine.com, but never received any replies.

-robert

> -----Original Message-----
> From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Jeff
> Giacobbe
> Sent: Monday, April 30, 2012 07:46
> To: SECURITY () LISTSERV EDUCAUSE EDU
> Subject: [SECURITY] Degreedup.org - phishing scam or just junk mail?
>
> Greetings-
>
> Just testing the wind on this one... Our campus seems to get regular
> monthly 'spam' from an outfit called DegreedUp.org offering scholarship
> applications (for a small fee of course)
>
> I'm trying to determine if this is just your run-of-the-mill unsolicited
> junk mail or if it moves into phishing scam territory.
>
> I can provide a copy of the emails we've received privately if anyone is
> interested.
>
> Thanks,
>
> Jeff Giacobbe
> Associate Vice President Enterprise Technology Services
> Montclair State University