Skip to main content

Recent Examples of Phishing

These are some examples of phishing emails seen on campus. Do NOT assume a suspect email is safe, just because it is not listed here. There are many variants of each, and new ones are being sent out each day.

Urgent Scheduled Meeting

Hovering over the link reveals the true nature of the email. Broken english is another red flag.

From: Stanford University <infoportal@stanford.edu>
Sent: Monday, November 11, 2019 10:01 PM
Subject: Urgent Scheduled Meeting

Hello Member,

There would be an important meeting scheduled for tomorrow.

Kindly click here to view meeting details

Thank You
Stanford University.

Case ID:9354-61 - random numbers after Case ID:

A quick hover over the link reveals the phishing URL.

Senders email address a big red flag.

From: stanford.edu IT Support Note. <emorfaw@sourcingpartner.com>
Sent: Thursday, November 7, 2019 7:50 AM
To: User <user@stanford.edu>
Subject: Case ID:9354-61

Due to a server error on your e-mail, (user@stanford.edu) (7) incoming messages were delayed.

Log on to your portal to recover your delayed messages
Recover Delayed Messages
2019 Message Center

Your e-mail will be deleted.

From: Stanford University <Zh132889@umconnect.umt.edu>
Sent: Wednesday, September 25, 2019 6:31 AM
To: Harvey, Zachary <zachary1.harvey@umconnect.umt.edu>
Subject: Your e-mail will be deleted.

Hello

This is a final notification to all Stanford University e-mail users, that we are deleting in-active accounts. Validate your email now. Failure to do this within 24 hours, your account will be deleted

Validate Email Account

Sincerely
Stanford University
IT Help Desk

Stanford CS -Payroll Notice

Marked as SPAM in the subject but some were delivered without the warning.

From: Stanford CS - Payroll Service <info@cs.stanford.edu>
Date: Friday, August 2, 2019 at 2:28 PM
Subject: *****SPAM***** Stanford CS -Payroll Notice

1 New Payroll Stanford CS Message

Click https://cs.stanford.edu/hr/payroll.php to READ

Human Resources & Payroll Service
Stanford CS - Stanford University

Campus Administrative Registrar

Phishing email sent from compromised SUNet.

From: Registrar 7/29/2019 8:11:05 PM Desk <ade@stanford.edu>
Sent: Monday, July 29, 2019 1:11 PM
To:
Subject: Campus Administrative Registrar

Hello , user@stanford.edu,

Submit your symester course attendance to (Faculty Dean 7/29/2019 8:11:05 PM) on

Due to the file size, it can not be uploaded to email. Review to authenticate.

COURSE LATE REGISTRATION

Second email from compromised SUNet. Lots of red flags. Why would MSFT Support Team be sending out emails to students?

From: "STANFORD FACULTY DESK 7/29/2019 8:58:37 PM" <abhate@stanford.edu>
Date: Monday, July 29, 2019 at 1:58 PM
subject: COURSE LATE REGISTRATION

Verify your account

Dear user@stanford.edu

Please note that your course registration dues is past due be restricted to campus facilities and classes.
It is imperative to conduct an audit of your information is
present, otherwise your lectures would be denied.

Started now

We invite you to act fast, if you need any help you can
contact our online support.

Sincerely,
MSFT Support Team

Important Info HR Department

A hover over the URL unmasks this as a phishing email. 

Dear user@stanford.edu,

A private document has been sent to you by the Human Resources Department.

Click https://login.stanford.edu to Login to view the document. Thank you!

Stanford University HR.
©2019 Stanford University
----------------------------------------------------------------------------------------------------------------------------------------------------------
CONFIDENTIALITY NOTICE: This email and any attachments may contain confidential information that is protected by law and is for the sole use of the individuals or entities to which it is addressed. If you are not the intended recipient, please destroying all copies of the communication and attachments. Further use, disclosure, copying, distribution of, or reliance upon the contents of this email and attachments is strictly prohibited.

Are you available?

Please see article on Stanford News for information on the gift card scam: https://news.stanford.edu/2019/02/14/beware-gift-card-sextortion-scams/

Hi,

I’m in a meeting right now and that’s why I’m contacting you through email. I should have called you, but phone call is not allowed during the meeting. I don’t know when the meeting will be rounding up, I want you to help me out on something very important right away.

On Jul 13, 2019 12:05 PM, John Doe <jdoe.stanford@gmail.com> wrote:
Available?
--
Chair

John Doe

URGENT REQUEST

This is a variation of the gift card scam. Please see: https://news.stanford.edu/2019/02/14/beware-gift-card-sextortion-scams/

Phishing email

Job Offer

Fake job offers will attempt to collect personal and banking information. In this instance look at the reply to field for a solid red flag: Reply-To: Walgreens <norelpy@jobs.wlagreens.com>

From: Walgreens <consumer@e24653.f.akamaiedge.net>
Date: July 16, 2019 at 09:06:22 PDT
To: Undisclosed recipients:;
Subject: Job Offer
Reply-To: Walgreens <norelpy@jobs.wlagreens.com>

Walgreens Secret Reviewers
We are looking for secret reviewers to rate their local Walgreens store!

No experience needed, just your honest opinion.
The task requires you to shop and evaluate our employees.

You will get paid to shop and you can keep the products.

You will be paid with amounts between $200-400 per assignment.

Reviewers are selected randomly every week and if selected, they will be contacted via phone or email.

Join our team by filling in the application form.

Join Us*
* If you have received this message inside your spam folder some links and other functionality might be disabled, move it to inbox folder in case you are having problems pressing 'Join Us'.
© Copyright 2019 Walgreen Co. All rights reserved.
You can unsubscribe from this list.