Print

Print


	We here at Spartan Way were told to get a solution ASAP to let our end users know their passwords are expiring.  If you do not know, University Advancement is a combination of University Alumni and University Development.  We were combined into one department almost 2 years ago.  We have been at 300 Spartan Way since the building addition was completed almost 4 years ago.  

	For 3 years we have had a 90 day password expiration.  This should be nothing new to the user.  However the complaints on when their password expires hit our management team and we had to act fast.  In case you didn't know this we have employees in almost every college and also some service units, this is why most of the members of NAG would have their users be affected.

	I will go back and take out the HTML in the subject line.  Also we are in the process of moving the email to a registered campus server.   So in a week you may see more that might take a user to a link  www.advancement.msu.edu/.........

Sorry if this caused any problems,

Walt Birney



-----Original Message-----
From: Leo Sell [mailto:[log in to unmask]] 
Sent: Monday, April 12, 2010 4:05 PM
To: [log in to unmask]
Subject: Re: [MSUNAG] Fwd: size="+1">SUBJECT: Important: Password Expiration Notification - uadv.msu.edu

John and all,

I called the originator of the message and verified it is legitimate, 
but with the Dreamweaver-introduced typos and such, it didn't come 
out well.

Spartan Way is actually the campus address for offices that are 
headquartered in the stadium addition....

I also advised the user that the message as crafted kind of sets our 
users up to respond to illegitimate/phishing messages.

Expiring passwords is all well and good, but it's important that the 
notices that might go out not act to encourage people to respond to 
the inevitable receipt of a phish.  My opinion, at least.... /L

At 3:36 PM -0400 4/12/10, John Valenti wrote:
>hi NAG'ers,
>I'm trying to decide if this is spearphishing, or legitimate.
>
>It has at least two tags tending toward malware:
>	1) subject line is messed up with "size="+1"
>	2) link to SOS Group is numeric IP address (but on campus)
>
>I'm guessing it is legitimate, but pretty confusing. What is 
>"Spartan Way"?  A search says that it is a street name, but how can 
>someone be in a street?
>thanks for any leads
>-John
>
>PS - sorry to forward this to the group,  but my people send me 
>about five of these per week, and I can usually decide within 30 
>seconds. Four out of the last four have been scams.
>

--
Leo Sell
ATS Help Desk
517-432-6200