Go to the U of M home page

Wednesday, November 16, 2016

Example 171: Resource Info


PDF from compromised user - spam "mystery shopper" offer
Received November 2017

Things to note


  • Email comes a compromised umn.edu user's account
  • Attachment contains a PDF - only to deliver an ad for secret shopper offer
  • This is not the first such offers - the pdf is the same but the link is different from the others
  • This is NOT a legitimate offer - the application is designed for identity theft



Message Text:

From: Compromised User < xxx  @ umn.edu>
Date: Wed, Nov 16, 2016 at 6:14 AM
Subject: Resource Info
To:
Good Morning,
I participated in this survey and made some extra pay, kindly go through
the included info for details.
Thanks.

PDF with link to login form

pdf with link to bogus sign-up page
pdf with link to bogus sign-up page


Linked Sign Up on Compomised Site
screen shot of secret shopper sign up form
screen shot of secret shopper sign up form




No comments:

Post a Comment

Note: Only a member of this blog may post a comment.