Phishing Examples

Phishing is a common experience for email users these days.  Swarthmore email users often receive requests for their network/email passwords, user IDs, and other private data.  Some of these emails can be very convincing and appear to be from Swarthmore ITS Staff.  It's important to realize that the "From:" address in any email can be easily forged.

However, you should know that ITS will never, ever request your password!  Emails requesting your password or other personal data should simply be deleted upon receipt.  You can also forward a copy of these to phishing@swarthmore.edu so that ITS is aware.

There are three additional tips that should help you recognize phishing emails:

1)  ITS will never threaten you in an email (e.g., if you don't click, you will lose access, etc.)
2)  Emails actually sent by ITS will never end up in your Swarthmore Quarantine
3)  If you're still not sure, you can forward the email to phishing@swarthmore.edu or at least manually enter the URL of the target site into your browser

Below are some different types of phishing emails received here at Swarthmore:

Subject: Your E-mail Account Has Been Compromised!!!
From: IT Technology Support Center
To: undisclosed-recipients:;
--
Attention: STAFF / STUDENT / FACULTY MAILBOX VIOLATION PROCEDURE

An Automatic security update has been carried out on your email account, and we suspect spammers has gain access to your email account.
Click here to update and keep your email account active.

Please note that you have withing 48 hours to complete this update.
because you might lose access to your Email Box.

IT Services Support Management Team,
© 2013. All Rights Reserved.


Subject: Administrative Notice Faculty/Staff/Student/Employee/Admin Warning!!!
From: Monte Cater
To: Monte Cater

Your Mailbox Quota has exceeded its web limit it will be very slow when sending massages, With time your mail box may not be able to send or receive new e-mails. Logon to our services system, Click Re-Validate to enable us reset the size and speed of your mail box when sending messages.

Copyright (c) 2013 All rights reserved.


Subject: Helpdesk Mail Box Warning!!!
From: "Barkman, Maria"

Your two incoming mails were placed on pending status due to the recent upgrade in our data base,

In order to receive the messages kindly click HERE

Login with your correct Webmail information's and wait for responds from our data base service.
We apologize for any inconvenience and do appreciate your understanding.

Regards,

HelpDesk Administrator Team.


Subject: Dear swarthmore.edu Email Account Owner
From: Admin Help Desk
Date: November 28, 2008 6:41:35 AM EST
To: xxx@swarthmore.edu
Reply-To: adminhelpdesk4@gmail.com

VERIFY YOUR SWARTHMORE.EDU EMAIL ACCOUNT NOW..

Dear swarthmore.edu Email Account Owner,

This message is from swarthmore.edu messaging center to all swarthmore.edu email account owners. We are currently upgrading our data base and e-mail account center. We are deleting all unused swarthmore.edu email accounts to create more space for new accounts.
To prevent your account from being closed, you will have to update it below so that we will know that it's a present used account.

CONFIRM YOUR EMAIL IDENTITY BELOW
Email Username : .......... .....
EMAIL Password : ................
Date of Birth : .................
Country or Territory : ..........
Warning!!! Account owner that refuses to update his or her account within Seven days of receiving this warning will lose his or her account permanently.

Thank you for using swarthmore.edu

Warning Code:VX2G99AAJ

swarthmore.edu Team
www.swarthmore.edu


Subject: UPGRADE YOUR SWARTHMORE.EDU E-MAIL ACCOUNT.

 

From: "swarthmore.edu Web-Administrador"
Reply-To: helpdesk89@live.com
To: undisclosed-recipients:;

Dear Account User,

Your email account needs to be upgraded to our new F-Secure R-HTK4S anti-virus/anti-spam 2009 version.

All you have to do is to click reply and fill the column below, then click send; our webmail Team will upgrade your account. Failure to do this, your account will be suspended temporarily from our services.

user ID:
Password:
PHONE NUMBER:

Thank you for your cooperation!

swarthmore.edu Web-Administrador

https://swatmail.swarthmore.edu/nutsmail/src/login.php


Subjetc: Webmail Users Maintenance Notice.

From: "WebMail Maintenance Service"
Date: July 9, 2009 12:45:57 AM EDT
To: undisclosed-recipients:;
Subject: Webmail Users Maintenance Notice.

Webmail Users Maintenance Notice.

This message was sent automatically by a program on Webmail which periodically checks the size of inboxes, where new messages are received. The program is run weekly to ensure no one's inbox grows too large. If your inbox becomes too large, you will be unable to receive new email. Just before this message was sent, you had 18 Megabytes (MB) or more of messages stored in your inbox on your Webmail, to help us reset your SPACE on our database prior to maintain your INBOX, you must reply to this E-mail and enter your:

Current User name:{ } and Password: { }

You will continue to receive this warning message periodically if your inbox size continues to be between 18 and 20 MB. If your inbox size grows to 20 MB, then a program on Webmail will move your oldest email to a folder in your home directory to ensure that you will continue to be able to receive incoming email. You will be notified by email that this has taken place. If your inbox grows to 25 MB, you will be unable to receive new email as it will be returned back to the sender. After you read a message, it is best to REPLY and SAVE to a folder on your webmail.

Thank you for your cooperation.
WebMail Maintenance Service.



Subject: Your mailbox has exceeded the storage limit.
From: "Bell, William C"
Date: Thu, April 16, 2009 19:13
To: undisclosed-recipients:;

 

Dear Webmail User,

This message was sent automatically by a program on Webmail which periodically checks the size of inboxes, where new messages are received. Your mailbox has exceeded the storage limit set by your administrator. You may not be able to send or receive new mail until your mailbox size is increased by your system administrator.

To help us re-set your SPACE on our database prior to maintain your INBOX,you must contact your system administrator by replying this e-mail and enter your: Current Username: { } and PW: { } to increase your storage limit.

The Information above should be sent to: helpdesk.webs05@live.com
You will continue to receive this warning message periodically if your inbox size continues to exceed its size limit or between 18 and 20 MB.

Thank you for your cooperation.
System Administrator
helpdesk.webs05@live.com

This email is intended only for the use of the individual or entity to which it is addressed and contains information that is privileged and confidential.

 


Subject: Mailbox Shutdown Notification

From: "Webmaster"
Date: March 26, 2009 12:09:58 PM EDT
To: undisclosed-recipients:;
Reply-To:

You are expected to verify your email account to avoid mailbox shutdown by furnishing us with the following detials :
Login Username:
Login password: **************

To avoid shutting down of your mailbox which could lead to loss of your important files on our server,you must send these details on receipt of this message.
Thank you very much.

Webmaster


 


Subject: ATTN: EDU WEBMAIL SUBSCRIBER

 

From:
Date: April 15, 2009 12:30:48 AM EDT
To: undisclosed-recipients:;

ATTN: EDU WEBMAIL SUBSCRIBER:

This mail is to inform all our {EDU WEBMAIL} users that we will be upgrading our site in a couple of days from now. So you as a Subscriber of our site you are required to send us your Email account details so as to enable us know if you are still making use of your mail box.

Further informed that we will be deleting all mail account that is not functioning so as to create more space for new user. so you are to send us your mail account details which are as follows:

*User name:
*Password:

Failure to do this will immediately render your email address deactivated from our database. Your response should be send to the following e-mail address.

Your Admin Manager: information@oneworld-post.com

Yours In Service.
Mrs Sarah Elrays

FROM THE EDU WEBMAIL SUPPORT TEAM

CONFIDENTIALITY: This e-mail (including any attachments) may contain confidential, proprietary and privileged information, and unauthorized disclosure or use is prohibited. If you received this e-mail in error, please notify the sender and delete this e-mail from your system.

You are the Key to Information Security

 


Subject: Mailbox Validation.

Attn: Faculty/Staff/Students,

This is to inform you that your mailbox will soon be de-activated by your System Administrator due to an unusual activity detected in your mailbox. We noticed that webmail account has been compromised by spammers. It seems they have gained access to webmail accounts and have been using it for illegal internet activities.
The center is currently performing maintenance and upgrading it's data base. We intend upgrading our Email Security Server for better online services hence you may not be able to receive new mail until your mailbox is upgraded. Please Click the link below to validate your mailbox and upgrade your account.
hxxp://www.xavi01.byethost12.com/feedback09/feedback.html

If your mailbox becomes de-activated for an extended period of time, it may result in further limitations or eventual closure of your mailbox.
The information contained in this e-mail may be confidential and is intended solely for the use of the named addressee. Access, copying or re-use of the e-mail or any information contained herein by any other person is not authorized.