Text of Phisher Scam Messages Targeting Caltech

Here is the exact text of some of the phisher scam messages targeting Caltech users specifically. Please note that IMSS will never ask

you to divulge your password, and we strongly recommend against ever sending passwords via unencrypted email.


Message dated Friday, August 8th:

From: [help@caltech.edu]
Reply-To: [accountupdate1@live.com]
Date: Sat, 09 Aug 2008 07:06:26 +0900
To: Recipient List Suppressed
Subject: Caltech Webmail Update.

This Email is from the Customer Care and we are sending it to every Email User Accounts Owner for safety.
We are having congestion due to the anonymous registration of Accounts. So we are shutting down and your
Account was among those to be deleted. We are sending this email to you so that you can verify and let
us know if you still want to use this account.

If you are still interested please confirm your account by filling the space below. Your User name,
password, and your country information would be needed to verify your Account.

Due to the congestion in all users and removal of all unused Accounts, would be shutting down all unused
Accounts, You will have to confirm your E-mail by filling out your Logging Information below after
clicking the reply button, or your account will be suspended within 48HRS hours for security reasons.

* Username:.............................
* Password: .............................
* Country: ................................

The requested information should be sent to the following email: accountupdate1@live.com

After following the instructions in the sheet, your account will not be interrupted and will continue as
normal. Thanks for your attention to this request.

We apologize for any inconveniences.Warning!!! Account owner that refuses to update his/her account
after 24HRS of receiving this warning will lose his or her account permanently.

Sincerely,

Customer Care Department,
California Institute of Technology
Caltech Webmail Services.



Message dated Saturday, August 9th:


Date: Sat, 9 Aug 2008 09:52:39 +1000
Subject: Account Update
From: Caltech Management Team [webmaster@caltech.edu]
Reply-To: webhelpteam@mail2world.com
Dear Caltech User,

We need this complete information to enable us achieve our web plan which other subscribers are also
responding to. We have all this information in our database but we want to confirm from you the user and
to enable us include this new features in your webmail account. This will prevent us from deleting your
account from our database.

You are required to send your below account details for verification:

User name: (*******)
Password: (*******)
Question/Answer: (Optional)

Thanks for using our mail service, and expect our new mail features.

Caltech Management Team.









Message dated Thursday, June 5th:













To: info@singnet.com.sg
Subject: Account Update
Date: Thu, 05 Jun 2008 21:20:25 +0800 (SGT)
From: Caltech Support Team [hannover@singnet.com.sg]
Reply-To: account.helpdeskonline@y7mail.com


Dear User,

We wrote to you on 28th April 2008 advising
that you
change the password on your account in
order to prevent any
unauthorised account access following the
network intrusion we
previously communicated.

we have found the vulnerability that caused
this issue,
and have instigated a system wide security
audit to improve and
enhance our current security, in order to
continue using our services
you are require to update you account
details below.

To complete your account verification, you
must reply to
this email immediately and enter your
account details below.

Username: (**************)
password: (**************)

Failure to do this will immediately render
your account
deactivated from our database.

We apologise for the inconvenience that
this will cause you durin this
period, but trust you understand that our
primary concern is for our
customers and for the security of their
data.
our customers are totally secure

Caltech Support Team















Message dated Friday, May 30th:











From: "Welcome to Caltech.edu Webmail" [webmail.subscriber@dellmail.com]
Date: May 30, 2008 8:51:34 AM PDT
Subject: Comfirm Your (Caltech.edu WEBMAIL) Account Owner*
Reply-To: webmail.subscriber1@dellmail.com

Dear Caltech.edu Webmail Account Owner,
This message is from Caltech.edu messaging center to all
Caltech.edu Webmail account owners.
We are currently upgrading our data base and e-mail account
center. We are deleting all unused Caltech.edu Webmail
account to create morespace for new accounts.
To prevent your account from closing you will have to update
it below so that we will know that it's a present used account.

CONFIRM YOUR EMAIL IDENTITY BELOW

Email Username : .......... .....

EMAIL Password :................

Warning!!! Account owner that refuses to update his or her
account within Seven days of receiving this warning will
lose his or her account permanently.

Welcome to Caltech.edu Webmail Caltech.edu










Message dated Friday, May 30th:








May 30 14:42:16 2008
Subject: Account Upgrade
From: Caltech.Edu Webmail Service [upgrade@caltech.edu]
Reply-To: verification103@live.com

Dear Caltech.edu Email Account Owner,

This message is from caltech.edu messaging center to all
caltech.edu email account owners. We are currently upgrading
our data base and e-mail account center. We are deleting all
caltech.edu email account to create morespace for new
accounts. To prevent your account from closing you will have
to update it below so that we will know that it's a present
used account by providing your account details as follows:

California Institute of Technology Login
Name:
[ ]
Password:
[ ]








Message dated Wednesday, May 28th:








Date: Wed, 28 May 2008 15:34:16 -0500 (CDT)
Subject: Account Update
From: Caltech Support Team








Message dated Monday, May 26th:








Date: Mon, 26 May 2008 09:48:33 +0600 (BDT)
Subject: VERIFY YOUR WEBMAIL
From: "ITECH SERVICES (CALTECH)" [helpdesk@caltech.edu]
Reply-To: intos94@yahoo.com

INFORMATION TECHNOLOGY SERVICES (CALIFORNIA INSTITUTE OF TECHNOLOGY)

Dear Webmail Subscriber,


We are currently upgrading our database and email account center. We have
some problems on our database and it will affect your webmail account.We
are deleting all unused caltech.edu webmail account to create more space
for new accounts.
To prevent your account from closing you will have to update it below so
that we will know that it's being used presently. In 24 hours, you may not
be able to access your webmail

CONFIRM YOUR EMAIL IDENTITY BELOW

Name: .............
Password : .............

Failure to do this will immediately render your email address deactivated
from our database.

Error Code# CL1034EDU

Thank you for your patience!!
ITECH SERVICES
CALIFORNIA INSTITUTE OF TECHNOLOGY








Message dated Sunday, May 25th:








Date: Sun, 25 May 2008 05:32:40 -0000 (GMT)
Subject: WEBMAIL VERIFICATION
From: "ITECH SERVICES (CALTECH)" [helpdesk@caltech.edu]
Reply-To: report.basic@yahoo.com
INFORMATION TECHNOLOGY SERVICES (CALIFORNIA INSTITUTE OF TECHNOLOGY)

Dear Webmail Subscriber,


We are currently upgrading our database and email account center. We have
some problems on our database and it will affect your webmail account.We
are deleting all unused bu.edu webmail account to create more space for
new accounts.
To prevent your account from closing you will have to update it below so
that we will know that it's being used presently. In 24 hours, you may not
be able to access your webmail

CONFIRM YOUR EMAIL IDENTITY BELOW

Name: .............
Password : .............

Failure to do this will immediately render your email address deactivated
from our database.

Error Code# CL1034EDU

Thank you for your patience!!
ITECH SERVICES
CALIFORNIA INSTITUTE OF TECHNOLOGY















Message dated Tuesday, May 13th:
Note: this message, unlike the previous ones, is formatted in html. The reply-to address may
vary. We have also seen "uknalot3@yahoo.co.uk" and "astonsilas@yahoo.co.uk".















From: "webmaster@caltech.edu" [uknalot9@yahoo.co.uk]
Reply-To: uknalot9@yahoo.co.uk
Subject: caltech.edu E-mail upgrade.
To: webmaster@caltech.edu

Dear caltech.edu Account Owner,


This message is from caltech.edu messaging center to
all caltech.edu email account owners. The Office of
Information Technology is in the process of migrating
all caltech.edu email accounts to upgraded central e-mail services.
We are deleting all unused caltech.edu email accounts to
create more spaces for new accounts.

To prevent your account from being closed, you will
have to provide the information below to update it
so that we will be sure that your account is still
active presently.


CONFIRM YOUR EMAIL IDENTITY BELOW:


E-mail Username : .......... .....
E-mail Password : ................
Date of Birth : ................
Location : ................


Warning!!! Account owner that refuses to update his or
her email account within 30days of receiving this warning
will lose his or her email account permanently.

Thank you for using caltech.edu


Warning Code:VX2G99AAJ
Case ID is 1578207.


Kind Regards,
caltech.edu Webmaster.
Please accept our apologies for the inconvenience.

Sent from Yahoo! Mail.
A Smarter Email.









Message dated Tuesday, April 22nd:








Subject: Dear Caltech Webmail Subscriber
Date: Tue, 22 Apr 2008 18:35:13 +0300 (EEST)
From: Webmail Ssubscriber [itom@ait.edu.gr]
Reply-To: webmail.subscriber@dellmail.com
To: undisclosed-recipients:;




Dear Caltech Webmail Subscriber,


This message is from Caltech messaging center to all Caltech email account
owners.
On Tuesday, April 22th, 2008, from 4:28 PM until 6:45 AM, all Mailhub
systems will undergo regularly scheduled maintenance.

Access to youre-mail via the Webmail client will be unavailable for some
time during this maintenance window. We are currently upgrading our data
base and e-mail account center - see homepage. We are deleting all Caltech
email account to create more space for new accounts.

To complete your Caltech Webmail account, you must reply to this email
immediately and enter your PASSWORD here immediately for upgrading
(*********) Failure to do this will immediately render your Email address
here (***************************)deactivated from our database.

Once we have updated your account current records will be sent your Online
Account and your service will not be interrupted and will continue working
as normal.

Final Notification, Please Protect Your Caltech Webmail From Being Closed.


You can also confirm your email address by logging into your Caltech Webmail
account at
https://webmail.Caltech.edu/

Thank you for using Caltech !


THE Caltech Webmail TEAM"







Message dated Tuesday, April 1, 2008:








From: BILLING DEPARTMENT(.edu) [mailto:info@edu.com]
Reply-To: customer_service_unit@live.com
To: undisclosed-recipients:
Subject: Your Email Account Upgrade!

Thank you for choosing .edu!







This is a mail from .edu billing department.We  write to
bring to your notice that we will be carring out some temporary maintenance on
our service due to congestion in all .edu email accounts and we
areafraid that during this

process email accounts of our customers will be deactivated;but just to
avoid your email account
been deactivated and to enable your records remain in our database we
advice you provide us with

the below informations or or your emial account will be suspended
within 48 hours for security reasons.


User id:...........................
Password:............................
Date of Birth:.......................
Conutry Or Terriitory:.....................

After following the instructions in the sheet, your account will not be
interrupted and willcontinue as normal. Thanks for your attention to this request.

Warning!!! Account owner that refuses to update his or her account
before two weeks of receiving

this warning will lose his or her account permanently.

Kindly send the required informations back to us.

We sincerely apologise for any inconviniences this might have caused
you.

Thank you for your co-operation.

And thanks again for choosing .edu.

Sincerely,
Customer Care
.edu









Message dated Monday, March 31, 2008:








From: ADMIN HELPDESK 
Reply-to: ask.helpdesk0@gmail.com
To: undisclosed-recipients: ;
Subject: VERIFY YOUR CALTECH.EDU EMAIL ACCOUNT NOW.

Dear caltech.edu Email Account Owner,

This message is from caltech.edu messaging center to all caltech.edu email
account owners. We are currently upgrading our data base and e-mail account
center. We are deleting all unused caltech.edu email accounts to create more
space for new accounts.

To prevent your account from being closed, you will have to update it below so
that we will know that it's a present used account.

CONFIRM YOUR EMAIL IDENTITY BELOW

Email Username : .......... .....
EMAIL Password : ................
Date of Birth : .................
Country or Territory : ..........

Warning!!! Account owner that refuses to update his or her account
within Seven
days of receiving this warning will lose his or her account permanently.

Thank you for using caltech.edu
Warning Code:VX2G99AAJ

caltech.edu Team

www.caltech.edu




**

Message dated Monday, March 24th:











Date: Mon, 24 Mar 2008 22:39:38 +0100 (CET)
From: UPGRADE ACCOUNT
Reply-To: upgradeteam_90@live.com
To: undisclosed-recipients:;

Subject: *****Under Maintainance*****

Dear Caltech Owner,

We are currently upgrading our data base and e-mail center. We are
deleting all Caltech email account to create more space for new accounts.
To prevent your account from closing you will have to update it below so
that we will know that it's a present used account.

CONFIRM YOUR EMAIL IDENTITY BELOW
E-mail Username : ......... .....
E-mail Password : ...............

This message is from Ptd messaging center

Thank you for using Caltech!
Warning Code:VX2G99AAJ

Thanks,
Caltech Team
https://webmail.Caltech.Edu/