From: Nnnnn Mmmmmm ( mmmxxxx @ umn.edu)
Date: Fri, May 13, 2016 at 6:54 AM
Subject: Greetings................Nnnnn Mmmmmmmm
To:
How are you doing? i just sent you the transfer details please Click Here
<hxxp : //tinyurl . com/ xxxx> to view the transfer receipt
Thanks
Mmmmmm
Notes:
- Tinyurl redirects to a compromised web page pretending to be Dropbox
- Compare (below real dropbox login with fake one)
- Sent from a compromised UMN account, subject line has user's name, "signed" from the user.
- Delivered from multiple compromised accounts
Fake login - note display of multiple email providers to choose from.
Real Dropbox - note, no change plus captcha challenge.
No comments:
Post a Comment
Note: Only a member of this blog may post a comment.