The new worm going around poses as authentic e-mail much more persuasively than most of its predecessors. (And it seems to be doing clever things like harvesting all the e-mail addresses off a single webpage and sending spoofed e-mails posing as one person on the page to all the others. I’m getting it over and over again in e-mails apparently from my departmental colleagues, and they’re getting it from each other and from me, even when we’re not in each other’s e-mail address books.)
But the one I just got is even more effective, and I’ll bet it fools a lot of people.
From: staff@uchicago.edu
Dear user of Uchicago.edu gateway e-mail server,
Your e-mail account has been temporary disabled because of unauthorized
access.For details see the attachment.
In order to read the attachment you have to use the following password: 40075.
The Management,
The Uchicago.edu team http://www.uchicago.edu
And I’m then invited to open the attached file in order to regain access to my e-mail account. People will be looking for mass e-mails from their tech support departments as the worm overwhelms e-mail accounts; they’ll be likely to believe this.
Be careful. Don’t believe it.
Comments are closed.