Phishing Scams Seen at UD

Don’t ever respond to email like this.

• We’ll never ask you to send us your password and date of birth.
• This phishing scam is clearly not from UD. Look at the from and reply-to addresses.
• We’re not perfect, but we try to send out email without sentences like this one:
  

  Effective from the moment this email his been received
  and response received from you.

Just delete it.

Date: Sat, 17 Dec 2011 09:32:24 -0500 (GMT-05:00)
From: "Udel.edu Webmail Services" 
Reply-To: "Udel.edu Webmail Services" 
Subject: Udel.edu Email Notification

This message is from udel.edu messaging center to all
udel.edu email account owners,we are removing access to
all our Webmail clients.

Your email account will be upgraded to a new enhanced
webmail user interface provided by udel.edu.

Effective from the moment this email his been received
and response received from you.

Udel.edu will discontinue the use of our udel.edu
Webmail and our udel.edu webmail Lite interfaces.

To ensure your e-mail address book is saved in our database
kindly enter your details filled below:

Email.........
Password......
DOB...........

And send it back to us, which will enable us to transfer
your contacts to our new Webmail client database.

All e-mails will be safe in this transition! All your old
email will still be there and you will have new unread
messages waiting for you. We are confident that you will
like the new and improved webmail interface.

Failure to comply with this immediately will remove your
access from our udel.edu database.

Thank you for using udel.edu.


Yours Sincerely,
Udel.edu Webmail Services

No, the IT Support Center did not send you email asking you to send them your UDelNet ID and UDelNet Password. The message below is a classic spear phishing scam. Lots of UD specific language in this phish. But if you read carefully, the message reads like something written in a foreign language then forced through a not-very-good translation program.

And, in case you’ve forgotten, the University of Delaware will never ask you to email in your UDelNet ID and password.

If you got this message, just delete it.

From: "IT Support Center"
Date: November 17, 2011 3:59:53 PM EST
Subject: Service Upgrade & Maintanance
Reply-To: IT Support Center

Dear Valued Subscriber,

Service Upgrade & Maintanance

In line with the upgrade of our services to enhance relevant service continuity of all
webmail/UD Google Apps account is in the process of being upgraded to a new set of
Windows-based servers and an enhanced online email interface in line with internet
infrastructure maintenance. The new servers will provide 2GB storage per mailbox,
new spam protection, new Web Mail interface, IMAP, POP, and SMTP support.

To ensure that UD webmail/UD Google Apps account is not intermittently disrupted 
but active during and after this service upgrade to the new servers, you are 
required to confirm your webmail/UD Google Apps account login details by 
stating your:

 * UDelNet ID:
 * UDelNet password:

as this will prompt the upgrade of your account. However kindly note that if 
receipt of this notice if duly acknowledged, it might result to a temporal 
deactivation of your webmail/UD Google Apps from Support database. Your 
webmail/UD Google Apps account shall remain active upon your confirmation 
of your account login details.

IT Support Center apologizes for any inconvenience caused.

IT Support Center

Information Technologies Support Center  University of Delaware.

• First off, UD will never send you email telling you to click on a form to increase your email quota.
• Second, UD will never ever send you email of any kind that appears to come from “ShastaCollege.edu.”
• Third, we’re not perfect, but we hope that we’d send email with a lot fewer typos.
• Finally, will UD ever sign email “Local-host”?

Delete it.

        From: 	Cox, Estella 
	Subject: 	Mailbox Quota Exceeded
	Date: 	October 20, 2011 12:10:22 PM EDT

Your web mail quota has exceeded the set quota which is 
3GB.you are currently running on 3.9 GB.
To re-activate and increase your web mail quota please click 
the link below.




Failure to do so may result in the cancellation of your web 
mail account.
Thanks, and sorry for the inconvenience
Local-host.

Here’s a classic. Oh no! The UDEL Webmail server has a virus! We need your Email Anda [sic], UDelNet ID, and Password. No we don’t.

UD will never ask you to email your password to anybody. Even though it appears to have a copyright notice, take a close look at the email address it appears to come from…. and the unprofessional typos….

Delete it.

From: UDEL ACCOUNT MANAGEMNT [mailto:wsw8156@mail.fsptt.ln.cn]
Sent: Sunday, October 16, 2011 6:22 AM
Subject: Urgent
 
An HTK4S virus has been detected in the UDEL Webmail server, and all UDEL webmail 
accounts need to be upgraded immediatly to prevent damage to the UDEL webmail.
You are therefor required to provide your account identities listed below to 
enable us verify and perform maintainance in your account with the new HTK4S 
anti-virus/anti-Spam version 2011. failure to provide your valid information, 
your account will be suspended temporarily from our services.
 
Email Anda:
UDelNet ID:
Password:
 
Copyright© UDEL Webmail 2011 All Rights Reserved.