More phishing attempts this weekend

As many of you noticed, there was another batch of phishing email sent to Gustavus email accounts over the weekend.  Thank you to all of you who forwarded us the email.  Your quick response allowed us to block any replies to those messages and keep the users who fell for it from divulging their passwords.

As always I would like to remind everyone that they should never send their password in email.  We won’t ask you to do that.

Here is what the email looked like:

 

Subject:	Confirm Your Email Address!
Date:	Sat, 10 May 2008 23:32:37 +0800 (MYT)
From:	GAC.EDU SUPPORT TEAM <helpdesk@gac.edu>
Reply-To:	verification_team03@yahoo.com.hk
To:	undisclosed-recipients: ;

Dear gac.edu Subscriber,

We are currently carrying-out a mentainance process to your gac.edu
account, to complete this process you must reply to this email
immediately, and enter your User Name here (**********) And Password
here(**********)  if you are the rightful owner of this account.

This process we help us to fight against spam mails.
Failure to summit your password, will render your email address
in-active from our database.

You can also confirm your email address by logging into your
gac.edu account at: https://webmail.gac.edu/

NOTE: You will be send a password reset messenge in next seven (7)
working days after undergoing this process for security reasons.

Thank you for using gac.edu!
THE GAC.EDU TEAM

Some things to note about this email.  The Reply-To: address is a yahoo.com.hk address, the Date is from the MYT timezone, and it is signed “THE GAC.EDU TEAM”

Please don’t send passwords via email to anyone.  If you do, whoever gets your password will use it to send spam/viruses from your account and possibly use it to access other systems or attempt to gain access to your bank account.