Agreed. It is one of the best examples I’ve ever seen. It does still have some inconsistencies, though. And, of course, we can always examine the headers
for it’s true point of origin.
In my department (RHS Information Services), we’ve been following up on these attempts with division-wide security alerts showing the message (appropriately
sanitized) and educating our users how to spot it and messages like it. So far, it’s been working well. We’re starting to get notified of these messages by our user base before we receive/see the message.
Ryan M. Finn
Systems Administrator
Michigan State University
From: Leo Sell [mailto:[log in to unmask]]
Sent: Monday, November 07, 2011 9:17 AM
To: [log in to unmask]
Subject: [MSUNAG] Phishing alert - please spread awareness
Please let your users know that a very authentic looking phish has gone out to a large number of MSU mail accounts. appropriate measures are being taken, however until the form is disabled by the vendor (Google) it will remain possible
for users to compromise their credentials if they are taken in by this scam.
The phish appears to come from an official MSU email source, etc. and includes the following header AND a typical "rights reserved" footer. (I removed the actual form link).
Phish messages don't get a lot better than this!!
Leo Sell
Academic Technology Help Desk
517-432-6200
-------- Original Message --------
|
Subject: |
Hello |
|
Date: |
Mon, 07 Nov 2011 21:05:06 +0800 |
|
From: |
IT ServiceDesk <[log in to unmask]> |
|
Reply-To: |
|
|
Organization: |
BNM |
|
To: |
undisclosed-recipients:; |
*********************************************************************************