Archive for the “GoogleApps at UD” Category

We had several reports of this phishing message showing up in UD inboxes this morning. One alert student sent us this screen shot off her cell phone:

Don't fall for this phishing scam!

Click image to see full-sized version.

Others reported seeing message headers spoofing an email address at UD: “officemail@udel.edu” [sic].

If you click the link in the message identified as “www.udel.edu,” it will take you to a pharming site designed to harvest your UDelNet ID and password–they stole the graphics from Google Apps at UD’s login screen. But the URL is NOT a UD URL!

Check the URL before you provide your info!

Check the URL before you provide your info! (Click the image to see a full-sized version.)

Even though the graphics are a near perfect match, the scammers’ URL is clearly NOT a valid udel.edu URL: http://www.bistrotbuffet.com.br/plugins/2udel3.edu.htm

Yeah, right. Like we’re doing our tech support from a Bistro-Buffet located in Brazil.

If you did fall for this scam, log in to the UD Network page to change your UDelNet password immediately. If you are unable to change your password, contact the IT Support Center at (302) 831-6000 or by submitting an ITSC Help Request form.

Think B4 U Click!

Comments Comments Off

Do you know Gillian and Adrian Bayford? You should since they offered you 1.5 million dollars. It seems too good to be true, right?

Here is the email message:


Click smaller image for a larger version.

Unlike scams that rely on phishing sites, this one links to a legitimate Web site to gain credibility so that you will reply to the email. Do not reply and never include any personal information in an email, especially to unfamiliar senders that do not know your name like this one:


Click smaller image for a larger version.

There are a few other problems with this email:

  • The message claims to know your email address, but it is sent to “recipients”.
  • The Google Management Team would never submit your email address to anyone.
  • There are grammar errors everywhere.

Comments Comments Off

Have you ever received 14 job offers in 24 hours? Chances are, the answer is “no”.


Click smaller image for a larger version.

They are clearly scams without even opening the email. The first line of each email starts with “We have an opening” or “While welcoming you to this hiring process”. Different people would not send identical email messages to your Google Apps @UDel.edu  account about career opportunities, especially if you did not submit any applications.

Here is an example of one of the email messages:


Click smaller image for a larger version.

There are a few things in the message that proves it is a phishing scam:

  • The email is asking for personal information.
  • There are grammar errors.
  • Your name is not in the message.
  • The message does not mention a specific position or company.
  • If you did not apply for anything, why are they offering you a job?

Comments Comments Off

With thousands of employee, retiree, faculty, and other email accounts moving to Google Apps at UD from the failing Mirapoint servers (the mail.udel.edu service), we’ve not had a chance to update this blog in a while.

Actually, some people have reported seeing less spam and phishing traffic in their inboxes since they moved from mail.udel.edu to Google Apps at UD. In fact, the phishing scam shown below is the first one some have seen in weeks:

Phishing Scam from 5/19/13

Click the image to see a larger version.

It’s not a very convincing scam. Non standard punctuation and capitalization–our favorite obvious typo: “information’s.” Oh, and we have not outsourced our email support to jimdo.com or anyone else.

See this message? Just delete it.

Comments Comments Off

No, the IT Support Center did not send you email asking you to send them your UDelNet ID and UDelNet Password. The message below is a classic spear phishing scam. Lots of UD specific language in this phish. But if you read carefully, the message reads like something written in a foreign language then forced through a not-very-good translation program.

And, in case you’ve forgotten, the University of Delaware will never ask you to email in your UDelNet ID and password.

If you got this message, just delete it.


From: "IT Support Center"
Date: November 17, 2011 3:59:53 PM EST
Subject: Service Upgrade & Maintanance
Reply-To: IT Support Center

Dear Valued Subscriber,

Service Upgrade & Maintanance

In line with the upgrade of our services to enhance relevant service continuity of all
webmail/UD Google Apps account is in the process of being upgraded to a new set of
Windows-based servers and an enhanced online email interface in line with internet
infrastructure maintenance. The new servers will provide 2GB storage per mailbox,
new spam protection, new Web Mail interface, IMAP, POP, and SMTP support.

To ensure that UD webmail/UD Google Apps account is not intermittently disrupted 
but active during and after this service upgrade to the new servers, you are 
required to confirm your webmail/UD Google Apps account login details by 
stating your:

 * UDelNet ID:
 * UDelNet password:

as this will prompt the upgrade of your account. However kindly note that if 
receipt of this notice if duly acknowledged, it might result to a temporal 
deactivation of your webmail/UD Google Apps from Support database. Your 
webmail/UD Google Apps account shall remain active upon your confirmation 
of your account login details.

IT Support Center apologizes for any inconvenience caused.

IT Support Center

Information Technologies Support Center  University of Delaware.

Comments Comments Off