Job Scam "Internship" From A Compromised UMBC Account

Check The "Reply-To" Address

The job scam below was recently reported to DoIT. The subject of the email is just “Internship” and has a very short message as can be seen below. The name and email of the from and to fields were removed for privacy reasons.


From: COMPROMISED EMAIL <@umbc.edu>

Date: Sun, 6 Sep 2020

Subject: Internship

To: <@umbc.edu>

Personal_Assistant  urgently needed. Contact charlenabolinlyco21@gmail.com for more information or to sign up.


Regards,

HR  Manager.


Please note that the phishing message above is supposedly coming froman umbc email but the reply-to in the emails header is set to <charlenabolinlyco21@gmail.com>. This would mean if the user tried to respond to the email above they would not be responding to the umbc email address, but instead they would be directly emailing the scammers at <charlenabolinlyco21@gmail.com>.


If you do receive this or any other email that you suspect is a scam, please do not click on any URL or reply. Either of those actions confirms to the sender that your email address is valid. Please forward the message (with the email headers) to security@umbc.edu.


How do I forward full email headers?

https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970


To read more articles published by DOIT visit: 

https://itsecurity.umbc.edu/critical/?tag=notice

https://itsecurity.umbc.edu/home/covid-19-news/?tag=covid19

Tags:

Posted: September 9, 2020, 7:42 PM