Phishing email this week…

Gustavus Technology Services will never ask for your password.

Be aware that this week, an email, NOT FROM GUSTAVUS, was sent out regarding your email password. Please be aware that this is a scam/phishing attempt. Thank you to those that brought it to our attention. Please delete the message immediately. Always remember, if you are in doubt, please call the Technology Helpline at x6111.

Here is what the email looked like:

From: “gac.edu” <isidro.morales@itesm.mx>
Date: August 27, 2008 12:08:02 AM CDT
To: undisclosed-recipients:;
Subject: Dear gac.edu Email Account Owner,
Reply-To: upgrad_account@live.co.uk

Dear gac.edu Email Account Owner,

This message is from gac.edu messaging center to all gac.edu
Email owners. We are currently upgrading our data base and
e-mail center. We are deleting all unused gac.edu
to create more space for new one and also increasing the junk mail bluker
so you our users will be get junk mail.

To prevent your account from closing you will have to update it
below so that we will know that it’s a present used account.

CONFIRM YOUR EMAIL BELOW
Email Username :…..
EMAIL Password : …………….
Date of Birth : ……………..
Country or Territory : ……….

However, Failure to comply may result in temporary webmail suspension.

Please understand that this is a security measure intended to help
protect you and your mailbox.
We apologize for any inconvenience.

Thank you for your anticipated co-operation.

Thanks,
gac.edu Team
gac.edu BET

How do I notice that this is SPAM?

1. Look at the sender, his email address isn’t even close to helpline@gustavus.edu.

2. Look at the reply-to: address. The email address is to some @live.co.uk email address.

3. It does not mention anything about our phone number. They may be able to spoof an email address, but it is unlikely they know the Technology Helpline’s phone number.