Go to the U of M home page

Friday, May 13, 2016

Phishing Example 145: Greetings................Nnnnn Mmmmmmmm

Received May 2016

From: Nnnnn Mmmmmm ( mmmxxxx @ umn.edu)
Date: Fri, May 13, 2016 at 6:54 AM
Subject: Greetings................Nnnnn Mmmmmmmm

How are you doing? i just sent you the transfer details please Click Here
<hxxp : //tinyurl . com/ xxxx> to view the transfer receipt




  • Tinyurl redirects to a compromised web page pretending to be Dropbox
  • Compare (below real dropbox login with fake one)
  • Sent from a compromised UMN account, subject line has user's name, "signed" from the user.
  • Delivered from multiple compromised accounts

Fake login - note display of multiple email providers to choose from.

Real Dropbox - note, no change plus captcha challenge.

No comments:

Post a Comment

Note: Only a member of this blog may post a comment.