Princeton University Targeted with Phishing Campaign

According to the OIT (Office of Information Technology) of Princeton, about 1,000-2,000 fraudulent, phishing e-mails had been recently dispatched to the campus community of the New Jersey, USA-based Princeton University, published dailyprincetonian.com dated March 28, 2012.

It appeared as though the origin of the messages was one of the WebMail accounts of the University. These, reportedly notified pupils as well as teachers that recipients needed for validating personal passwords and netIDs prior to keep on utilizing their accounts.

There was one web-link too inside the e-mails which diverted pupils onto certain site, which appeared like having association with Princeton's University. In reality, a Brazilian-designed phishing website, the particular site showed its log-in section.

So when the spoofed website acquired the passwords along with netIDs, the website-owners mimicked the university's Web-mail account followed with spamming their messages.

Steven Sather, Director of OIT Support Services observed that the above proved especially perilous to faculty members as that could let the perpetrators create fake credentials. Dailyprincetonian.com published this. Sather outlined that the culprits utilized numerous identical graphics too which one found on Princeton websites.

Worryingly, it's because of the above-mentioned kinds of phishing e-mail campaigns that global phishing activities are increasing, remark other officials. This statement has received the backing of statistics that Symantec the security company released within its Symantec Intelligence Report of February 2012, which states that worldwide phishing increased 0.01% during the month, so the worldwide mean percentage was 0.28% i.e. one e-mail out of a total 358.1 messages was related to phishing.

Meanwhile, as per Princeton University, it won't ever ask its members to provide their passwords over electronic mail; therefore, recipients of such e-mails mustn't answer the messages. Genuine Information Technology experts will ask anybody to tell his password only whilst they're at the desktop assisting the person sort out a PC snag, alternatively utilize an administrator user name of the system.

Moreover, in a similar phishing scam that targeted Duke University (North Carolina, USA) lately, the IT Security Office of the University too stated that it was aware of the scam insisting recipients that they must validate personal log-in details with Duke.

Related article: Pornography, No More Favored By Spammers

» SPAMfighter News - 4/3/2012