[nsp-sec] Gmail account used as dropbox in phish

[Chris Morrow]

tco

On Fri, 29 Jan 2010, RuthAnne Bevier wrote:

> ----------- nsp-security Confidential --------
>
> Another one -- initially I didn't realize this was a new reply-to.
> I don't have full headers yet:
>
>> From: Techonlogy Services Help Desk <cbaumgart at mail.csuchico.edu>
>> Date: January 29, 2010 2:06:17 PM PST
>> To: undisclosed-recipients:;
>> Subject: Email Account Confirmation
>> Reply-To: account.helpdesk111 at gmail.com
>>
>> CALIFORNIA INSTITUTE OF TECHNOLOGY EMAIL ACCOUNT UPGRADE
>>
>> ATTENTION WEBMAIL USER,
>>
>>
>> We regret to announce to you that we will be making some  vital
>> maintainance on our {CALTECH.EDU} website.
>>
>> During this process you might have login problems in signing  into
>> your Online account, but to prevent this you have to confirm your
>> account immediately after you receive this  notification.
>>
>> To confirm and to keep your account active during and after  this
>> process, please reply to this message with the below account
>> informations.
>>
>> Failure to do this might cause a permanent deactivation of  your
>> user
>> account from our database to enable us create more spaces for new
>> users.
>>
>> YOUR EDU. ACCOUNT CONFIRMATION
>> Name:
>> E-mail ID:
>> E-mail Password:
>> Are you a new account user: YES OR NO
>>
>> Your account shall remain active after you have successfully
>> confirmed
>> your account details to the email address below.
>>
>> Thanks for bearing with us.
>> California Institute of Technology, Pasadena, California 91125
>> Techonlogy Services Help Desk
>> Warning Code: 002671
>>
>>
>>
>>                             !!! WARNING !!!
>> Failure to log out will allow others to access your account.
>> Closing
>> the browser window does NOT log you out properly.  To log out,
>> please
>> click one of the "Log out" icons in the browser window
>
>
> --
> RuthAnne Bevier
> Information Security
> California Institute of Technology
> 626-395-2671
> ruthanne at caltech.edu
>
>
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
>
> Please do not Forward, CC, or BCC this E-mail outside of the nsp-security
> community. Confidentiality is essential for effective Internet security counter-measures.
> _______________________________________________
>