Quoting "Vasquez, Timo" <[log in to unmask]>:

>
>
>
>
> From: Vasquez, Timo
> Sent: Monday, June 02, 2008 10:31 AM
> To: [log in to unmask]
> Subject: Please confirm this is a total ruse
>
>
>
> I am looking for ATS response and also hoping some of the other Admins
> on campus have seen this today or last week.
>
>
>
> ----- Original Message -----
>
> From: The MSU Webmail Account Team <[log in to unmask]>
>
> To: undisclosed-recipients <undisclosed-recipients:;>
>
> Sent: Sun Jun 01 19:15:10 2008
>
> Subject: Confirm Your MSU Webmail Account
>
>
>
>
>
>
>
>
>
> Dear MSU Webmail Subscriber,
>
>
>
> To complete your MSU Webmail account, you must reply to this
>
> email immediately and enter
>
> your password here (*********)
>
>
>
> Failure to do this will immediately render your email address
>
> deactivated from our database.
>
>
>
> You can also confirm your email address by logging into your
>
> MSU Webmail account at
>
> https://mail.msu.edu/
>
>
>
> Thank you for using MSU Webmail!
>
>
>
> The MSU Webmail Account Team
>
>
>
>
>
> I want official confirmation this is 100% bad. The bottom link
> obviously works but the sender is a bit questionable.
>
>
>
> Thanks in advance,
>
>
>
> Timo
>
>

This particular phishing is using a return address that we have been blocking since 5-29 so anyone who tried to reply to this using msu's main mail server would not be allowed to send a reply.

If possible we will block the incoming ip address.

Steve Devine