[unisog] Phishing targeting University Admissions

Sergent, Phil sergent at marshall.edu
Mon Jun 14 15:21:27 GMT 2004

You still accept .zip files!?

Phil Sergent                                      MU 
Systems Programmer
Marshall University
Computing Services/Systems Group
Drinko Library 422a
Huntington, WV  25755-5320
304/696-3689 (Desk) 304/696-3601 (FAX)
Email: sergent at marshall.edu
It's not who you are that holds you back, it's who you think you're not.

-----Original Message-----
From: unisog-bounces at lists.sans.org
[mailto:unisog-bounces at lists.sans.org] On Behalf Of Joseph Brennan
Sent: Monday, June 14, 2004 8:19 AM
To: UNIversity Security Operations Group
Subject: Re: [unisog] Phishing targeting University Admissions

--On Monday, June 14, 2004 8:46 AM -0400 Michael Holstein 
<michael.holstein at csuohio.edu> wrote:

> Greetings,
> Late last week we saw a "phishing" attack targeting our students using
> the enticement of a research assistantship (and a student visa). The
> messages are written such that they appear to be from a legitimate
> University International Admisions contact, and contain an
> as-yet-unidentified "mailer.zip" attachment.

Do you have the header portion?  I assume it claimed to be from an
address at your school but really came from somewhere else.  Some
general rule might be made to filter out such mail.

Joseph Brennan
Academic Technologies Group, Academic Information Systems (AcIS)
Columbia University in the City of New York

unisog mailing list
unisog at lists.sans.org

-------------- next part --------------
A non-text attachment was scrubbed...
Name: Sergent, Phil.vcf
Type: text/x-vcard
Size: 401 bytes
Desc: Sergent, Phil.vcf
Url : http://www.dshield.org/pipermail/unisog/attachments/20040614/8ddc772c/SergentPhil-0004.vcf

More information about the unisog mailing list