Print

Print


John Resotko wrote:
> Several users have reported these to me since last night, FYI.  It looks
> like a slight variant on the usual phishing attacks.
> (see example below)
>
> John A. Resotko
> Head of Systems Administration
> Michigan State University College of Law
> 208 Law College Building
> East Lansing, MI  48824-1300
> email: [log in to unmask]
> Phone: 517-432-6836
> Fax: 517-432-6861 
>
> Current Chairperson of the 
> MSU Network Communications Community
>   
John,

Thanks for the info.  We got a hold of this earlier and put up a service 
status on this phishing attempt almost first thing this morning. 

http://servicestatus.msu.edu/status_detail.php?id=2321

I trapped the IP address that this was stemming from for 24 hours, 
unfortunately its a Saudi Arabian University.  Hopefully they get this 
machine patched up.

Any phishing emails you all get in the future that you all want to pass 
on (either to abuse@ or this list), getting the FULL headers will be the 
most helpful to us!  We really need to find those IP addresses.  For 
instance, one of the last phishing attacks that came through went 
through the University of Chicago, we contacted their Abuse department, 
and they got the account sending the phishing attempts shut down right away.

Thanks again,
./brm