March 5, 2008
Case users today received a fraudulent email message which constitutes a phishing scam. This scam is an attempt trick users to provide userid/passwords to the criminals who will use your account to log into the Case web email service and further spam the university.
This scam has been weaving its way around other universities worldwide and appears to originate from other countries, but the phish received by case users today was from a host at another university. People who have responded to the phish in other universities have had their accounts used by the attackers within minutes of becoming victims.
If you were taken in by this scam and sent your CaseID and Password to the return address, please immediately notify the Case Help Desk (http://help.case.edu) you will need to change your Case password immediately with the Case Password Change Utility. Users also need to check their secret questions, which can be changed by someone with your password.
Users are reminded that Case will never request such information via email, and commend all those many users who have recognized the 'phishyness' of the message and forwarded these messages to our attention.
The Phishing email appears as:
From: ADMIN HELPDESK
Date: March 5, 2008 4:06:47 PM EST
To: undisclosed-recipients: ;
Subject: VERIFY YOUR CASE.EDU EMAIL ACCOUNT NOW.
Dear case.edu Email Account Owner,
This message is from case.edu messaging center to all case.edu email
account owners. We are currently upgrading our data base and e-mail
account center. We are deleting all unused case.edu email account to
create more space for new accounts.
To prevent your account from closing you will have to update it below so
that we will know that it's a present used account.
CONFIRM YOUR EMAIL IDENTITY BELOW
Email Username : .......... .....
EMAIL Password : ................
Date of Birth : .................
Country or Territory : ..........
Warning!!! Account owner that refuses to update his or her accountwithin
Seven days of receiving this warning will lose his or her
Thank you for using case.edu
Posted by Thomas Siu at 04:51 PM