Go to the U of M home page

Monday, February 19, 2018

Example 213: Employment

Fraudulent offer of employment from non-existant University Counselor. Likely "money-mule" scam.

Message Text:

From: Dr. John Largen <xxxxx @ gmail.com>
Date: Sun, Feb 18, 2018 at 8:54 PM
See Attached

Attached message:


Things to note:

  • Name in "From: doesn't match email address, or message text
  • Department named does not exist
  • Message follows standard "money mule" come-on

What's a money mule?

A money mule is someone recruited by criminals to transfer the profits of their illegal activities. The money may have been stolen directly from another bank account or may be the profits of fraud, drug trafficking, child labour or prostitution. Most of the criminals carrying out this type of crime are located abroad, so a money mule based in the UK is required to transfer the money overseas.
Although some money mules know that they are handling stolen money, criminals also target groups such as university students to unwittingly laundering the funds on their behalf.

Monday, February 5, 2018

Example 212: Incoming call from Wireless Caller AM

Bogus email with "voice mail" attachment - aimed at stealing credentials.

Message text:

From: Wireless Caller <Jxxx@xxxxus>Date: Fri, Feb 2, 2018 at 10:05 AMSubject: Incoming call from Wireless Caller AMTo: 

You have received a voice mail message from 801-917-7591 for mailbox 2119. Message length is 00:01:59. Message size is 8.3 KB.
attached file "WIRELESS MESSAGE.html"


web form in attached .html file
web form in attached .html file

Clicking "Listen" reveals a "login form"
Clicking "Listen" reveals a "login form"

Things to note:

  • No UMN branding.
  • UMN voice mail is not part of Office 365.
  • IF you filled in your ID/password, change them ASAP!