University IT
Recent Examples of Phishing
These are some examples of phishing emails seen on campus. Do NOT assume a suspect email is safe, just because it is not listed here. There are many variants of each, and new ones are being sent out each day.
Your e-mail will be deleted.
From: Stanford University <Zh132889@umconnect.umt.edu>
Sent: Wednesday, September 25, 2019 6:31 AM
To: Harvey, Zachary <zachary1.harvey@umconnect.umt.edu>
Subject: Your e-mail will be deleted.
Hello
This is a final notification to all Stanford University e-mail users, that we are deleting in-active accounts. Validate your email now. Failure to do this within 24 hours, your account will be deleted
Validate Email Account
Sincerely
Stanford University
IT Help Desk
Stanford CS -Payroll Notice
Marked as SPAM in the subject but some were delivered without the warning.
From: Stanford CS - Payroll Service <info@cs.stanford.edu>
Date: Friday, August 2, 2019 at 2:28 PM
Subject: *****SPAM***** Stanford CS -Payroll Notice
1 New Payroll Stanford CS Message
Click https://cs.stanford.edu/hr/payroll.php to READ
Human Resources & Payroll Service
Stanford CS - Stanford University
Campus Administrative Registrar
Phishing email sent from compromised SUNet.
From: Registrar 7/29/2019 8:11:05 PM Desk <ade@stanford.edu>
Sent: Monday, July 29, 2019 1:11 PM
To:
Subject: Campus Administrative Registrar
Hello , user@stanford.edu,
Submit your symester course attendance to (Faculty Dean 7/29/2019 8:11:05 PM) on
Due to the file size, it can not be uploaded to email. Review to authenticate.
COURSE LATE REGISTRATION
Second email from compromised SUNet. Lots of red flags. Why would MSFT Support Team be sending out emails to students?
From: "STANFORD FACULTY DESK 7/29/2019 8:58:37 PM" <abhate@stanford.edu>
Date: Monday, July 29, 2019 at 1:58 PM
subject: COURSE LATE REGISTRATION
Verify your account
Dear user@stanford.edu
Please note that your course registration dues is past due be restricted to campus facilities and classes.
It is imperative to conduct an audit of your information is
present, otherwise your lectures would be denied.
Started now
We invite you to act fast, if you need any help you can
contact our online support.
Sincerely,
MSFT Support Team
Important Info HR Department
A hover over the URL unmasks this as a phishing email.
Dear user@stanford.edu,
A private document has been sent to you by the Human Resources Department.
Click https://login.stanford.edu to Login to view the document. Thank you!
Stanford University HR.
©2019 Stanford University
----------------------------------------------------------------------------------------------------------------------------------------------------------
CONFIDENTIALITY NOTICE: This email and any attachments may contain confidential information that is protected by law and is for the sole use of the individuals or entities to which it is addressed. If you are not the intended recipient, please destroying all copies of the communication and attachments. Further use, disclosure, copying, distribution of, or reliance upon the contents of this email and attachments is strictly prohibited.
Are you available?
Please see article on Stanford News for information on the gift card scam: https://news.stanford.edu/2019/02/14/beware-gift-card-sextortion-scams/
Hi,
I’m in a meeting right now and that’s why I’m contacting you through email. I should have called you, but phone call is not allowed during the meeting. I don’t know when the meeting will be rounding up, I want you to help me out on something very important right away.
On Jul 13, 2019 12:05 PM, John Doe <jdoe.stanford@gmail.com> wrote:
Available?
--
Chair
John Doe
URGENT REQUEST
This is a variation of the gift card scam. Please see: https://news.stanford.edu/2019/02/14/beware-gift-card-sextortion-scams/
Job Offer
Fake job offers will attempt to collect personal and banking information. In this instance look at the reply to field for a solid red flag: Reply-To: Walgreens <norelpy@jobs.wlagreens.com>
From: Walgreens <consumer@e24653.f.akamaiedge.net>
Date: July 16, 2019 at 09:06:22 PDT
To: Undisclosed recipients:;
Subject: Job Offer
Reply-To: Walgreens <norelpy@jobs.wlagreens.com>
Walgreens Secret Reviewers
We are looking for secret reviewers to rate their local Walgreens store!
No experience needed, just your honest opinion.
The task requires you to shop and evaluate our employees.
You will get paid to shop and you can keep the products.
You will be paid with amounts between $200-400 per assignment.
Reviewers are selected randomly every week and if selected, they will be contacted via phone or email.
Join our team by filling in the application form.
Join Us*
* If you have received this message inside your spam folder some links and other functionality might be disabled, move it to inbox folder in case you are having problems pressing 'Join Us'.
© Copyright 2019 Walgreen Co. All rights reserved.
You can unsubscribe from this list.
Open Opportunity
Beware of overly generous pay. Check the reputation of the email address with emailrep.io or similar tool.
From: Eve Marrs <evemarrs1941@gmail.com>
Subject: Open Opportunity
Date: July 11, 2019 at 4:05:22 PM PDT
To: undisclosed-recipients:;
Hello,
I am offering a post that only requires 1-2 hours, 2-3 days in a week, you can work at your convenience and earn 230 weekly. Respond for more details if interested.
Best Regards,
Eve Marrs
