[nsp-sec] Attn Google: Gmail phishing account

[Brian Allen]

We had a phishing message with a gmail reply-to address:

Webmaster.wustl.edu at gmail.com

There might be other gmail accounts set up in this same format as part of these attacks: webmaster.<school>.edu at gmail.com


Thanks,
Brian Allen
network Security Analyst
Washington University


From: web team [mailto:webmaster.wustl.edu at gmail.com] 
Sent: Thursday, April 09, 2009 6:41 PM
To: Undisclosed recipients
Subject: REPLY A.S.A.P!!

Dear webmail account Holder:
This is to notify the entire students of the  University that we would be upgrading our server,so we want you to send the following information, in order to keep your account still active after the upgrade.
1)Username:
2)Password:
We would want you to acknowledge this email asap.
>From the Administrator Washington University in st.Louis