What is Phishing?
(fishing) (n.) The act of sending an e-mail to a user falsely claiming to be an established legitimate enterprise in an attempt to scam the user into surrendering private information that will be used for identity theft. The e-mail directs the user to visit a Web site where they are asked to update personal information, such as passwords and credit card, social security, and bank account numbers, that the legitimate organization already has. The Web site, however, is bogus and set up only to steal the user's information. These emails can be masked to look as if they were sent from your bank or credit card company. Keep in mind they would NEVER conduct business like this through email. It's just NOT SAFE!
Phishing, also referred to as brand spoofing or carding, is a variation on "fishing," the idea being that bait is thrown out with the hopes that while most will ignore the bait, some will be tempted into biting.
LIS will NEVER send you an e-mail asking for usernames and passwords. If you are ever concerned about an e-mail you receive, please contact LIS Tech Support at extension 3900. Below are some recent examples of phishing emails.
LAST PHISHING ALERT Dated 10.6.08
If you receive this email Please DO NOT reply
Subject: PERIODIC UPGRADE
From: "Wheaton College WEBMAIL UPGRADE"
Reply-To: webmailupgradeteam008 @ uymail.com
User-Agent: SquirrelMail/1.4.9a
X-Priority: 3 (Normal)
Importance: Normal
To: undisclosed-recipients:;
Dear Wheaton College User,
This Email is from Wheaton College user Customer Care and we are sending it to every webmail User Accounts Owner for safety. we are having congestions due to the anonymous registration of accounts so we are shutting down some accounts and your account was among those to be deleted.
We are sending you this email to you so that you can verify and let us know if you still want to use this account. If you are still interested please confirm your account by filling the space below. Your Username, password, date of bith and your country information would be needed to verify your account.
Due to the congestion in all webmail users and removal of all unused Accounts, Webmail would be shutting down all unused Accounts, You will have to confirm your E-mail by filling out your by filling the space below. Your User name, password, date of bith and your country information would be needed to verify your account.
You will have to confirm your E-mail by filling out your Login Information below after clicking the reply button, or your account will be suspended within 24 hours for security reasons. You are to send the following information for verification
* Username: ............................
* Password: ............................
* Date of Birth: .......................
* Country Or Territory: ................
Your response should be sent to admin manager
Email:webmailupgradeteam008 @ uymail.com
Waiting to received the details of your two email.
Warning!!! Account owner that refuses to update his/her account after two weeks of receiving this warning will lose his or her account permanently.
Regard,
Customer Care Of Wheaton College
LAST PHISHING ALERT Dated 9.25.08
If you receive this email Please DO NOT reply
Subject: Merrill Lynchl Customer Service
From: Merrill Lynch Tech Support - commercial @ ml.com
Date: Thursday, 25 Sept 2008
Attention Merrill Lynch Customers!
Merrill Lynch Enhanced Security Authentication
We have enhanced the Merrill Lynch Business Center security access to further safeguard access to your account information.
Click on the hyperlink below and follow the prompts to answer and record answers to five personalized security questions.
In the future, we may ask, ask you for answers to these questions when you log into the Business Center to ensure that only you are accessing your account information.
Start now
Sincerely, Alphonso Romero.
2008 Merrill Lynch Corporation.
LATEST PHISHING ALERT - 8.24.08
If you receive this email Please DO NOT reply
Subject:E-mail Account Update...
From:"EDU HELP TEAM" info @ notice. com
Date:Sat, 23 Aug 2008 18:44:11 -0500 (CDT)
Dear "EDU" Email Account Owner,
This message is from "EDU" messaging center to all "EDU" email account owners. We are currently upgrading our data base and e-mail account center.We are deleting all "EDU" email accounts due to congestion just to create more space for new accounts.
To prevent your account from being deleted you will have to update it by providing the below informations so that we will know that it's a present used account.
We have been sending this notice to all our "EDU" email account owners and this is the last notice/verification exercise.
CONFIRM YOUR EMAIL IDENTITY BELOW
Email Username : .......... .....
EMAIL Password : ................
Date of Birth : .................
Country or Territory : ..........
Warning!!! Account owner that refuses to update his or her account within Seven days of receiving this warning will lose his or her account permanently.
Thank you for using "EDU" account!
Warning Code:VX2G99AAJ
Thanks,
EDU BETA.