Information Security Blog

To receive notification about new blog entries, follow SoM_ISO on Twitter

Another Clever Phishing Scam

Posted 9:09 PM, August 21, 2010, by eamsel

They're at it again... another phishing scam has been circulating Stanford since the beginning of August. This one is much more clever and is posted below.

You can tell that it is a scam by looking at the link that they want you to click on - weblogin is misspelled (weblogiin). If you do click on the link erroneously, you'll also notice that the Stanford logo is not correct.

In any event, Stanford is NOT sending out emails asking you to verify your email account (and they never will). Please ignore these emails and delete them. If you are still unsure, please check with IRT Information Security Services ( or contact the IRT Service Desk at 5-8000.

From: IT HelpDesk
Date: August 21, 2010 8:19:11 AM PDT
To: undisclosed-recipients:;
Subject: Mailman privacy alert

The Stanford Email service will receive a major upgrade on
Saturday, August 28th at 10:00 p.m.

For you not to have problem signing into your account during and after the upgrade click the link below and signin.

We anticipate that the maintenance will last no longer than 4 hours, and will be completed by approximately 2 a.m. During the maintenance window, each email server will be unavailable for a significant period of time, meaning that when your server is down, you will not be able to download email from the servers.

Incoming email will be queued, and delivery will be resumed as soon as the work is complete, so no email will be lost.

IT Services
Integrated Email and Calendar Team

Stanford Medicine Resources:

Footer Links: