We continue to see a number of suprisingly successful phishing attacks against academic e-mail addresses. The attackers send their targets customised e-mails redirecting them to a professional looking website asking for their e-mail account details.

The current trend is for the website to be hosted with a third party company that provides free web forms to web site authors. The page is usually convincing but the URL is usually questionable. Please make sure that your users know that you will never ask them for their password, and how they can spot the more obvious fraudulent e-mails and URLs.

This entry was posted on Monday, November 23rd, 2009 at 5:38 pm and is filed under News. You can follow any responses to this entry through the RSS 2.0 feed. Both comments and pings are currently closed.