nanog mailing list archives
Re: Fake-alert: VERIFY YOUR MERIT.EDU WEBMAIL ACCOUNT
From: Graeme Fowler <graeme () graemef net>
Date: Sat, 24 May 2008 17:14:33 +0100
On Sat, 2008-05-24 at 17:02 +0200, Peter Dambier wrote:
I dont trust it:
Quite right too, it's a spear-phishing attack. This is currently an almost daily occurrence for .edu domains. The compromised accounts are frequently abused via webmail systems, being used to send out more scams. The scammers responsible are also targeting UK higher ed institutions, with a limited degree of success. I can't really speak for my US counterparts with regards the success of the attacks, but one would surmise that it's more or less the same. To paraphrase badly: All users are gullible, but some are more gullible than others. -g
Current thread:
- Fake-alert: VERIFY YOUR MERIT.EDU WEBMAIL ACCOUNT Peter Dambier (May 24)
- Re: Fake-alert: VERIFY YOUR MERIT.EDU WEBMAIL ACCOUNT Ari Constancio (May 24)
- Re: Fake-alert: VERIFY YOUR MERIT.EDU WEBMAIL ACCOUNT Graeme Fowler (May 24)
- Re: Fake-alert: VERIFY YOUR MERIT.EDU WEBMAIL ACCOUNT Matthew Black (May 27)
- Re: Fake-alert: VERIFY YOUR MERIT.EDU WEBMAIL ACCOUNT Michael Holstein (May 27)
- Re: Fake-alert: VERIFY YOUR MERIT.EDU WEBMAIL ACCOUNT Matthew Black (May 27)