Many of us awoke this morning to find the following phishing email nestled in our inboxes:
From: “Help Desk” <email@example.com>
Date: Jun 24, 2014 1:08 AM
Subject: Update Your Account To avoid service interruption
Dear:Bucknell University Webmail Email Account users.
Emergency Notification System, Please make sure you update your account information per the instructions below To avoid service interruption.. Simply Click on the link to updated your account
NOTE:If unable to click the link, you are advised to copy and paste it
in a new browser.
Mail System Administrator
Copyright 2014 E-mail Account Upgrade
Copyright © 2014 Corporation. All rights reserved.
This is an OUTSTANDING opportunity to share some tips on how to spot a “phish.”
1. Why is someone from a help desk in Brazil emailing me (firstname.lastname@example.org)? Are they offering me tickets to a World Cup match? That, ironically, would also be “phishy.”
2. We call our email system “Bmail,” not “Bucknell University Webmail Email Accounts.”
3. Looks Like they Are having a Bit of trouble Randomly capitalizing Words and, using, punctuation..
4. The original link (which I removed so you wouldn’t inadvertently go there) went to some “jimdo.com” web page. I’m pretty sure any web page we would ask you to visit would end in something more familiar, like “bucknell.edu.”
5. We typically have the name of a recognizable staff member send and sign the emails we address to campus.
6. Tech Support would never go to the trouble of copyrighting an email account upgrade or form a corporation worthy of copyrighting. We’re just not that ambitious.
7. Finally, we would never ask you for your Bucknell username and password in an email.
This isn’t the first time a phishing email has reached our campus community, and it won’t be the last. The best defense against these type of exploits is to apply a little intellect and be suspicious of ANY email requesting sensitive information.
Of course, if you still aren’t sure about a particular message, please feel free to contact Tech Support at email@example.com or by calling 570-577-7777.