Nasty looking scam from University mail box:

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Fri Dec 11, 2015 12:54 pm

I am currently doing some post grad work at Manchester University and I have received this:
from: http://therapeakids.co.za/wp-includes/pomo/promo/616ebef5206a25cda1c6b56fdc865886/grant.html
body: Important university grant information

UO
University of Manchester <[email protected]>
Reply all|
To:
[email protected]; ... Wed 09/12/2015 13:07
From:
University of Manchester <[email protected]>
Sent: Wed 09/12/2015 13:06
To:
[email protected];
Dear University of Manchester Students,

We are pleased to inform you that the university has been awarded funds for undergraduate study support by the government.

All undergraduate and postgraduate students studying on a full time course are entitled to this grant. To ensure you receive your grant, you are required to submit your details via the web link below.

Grant Information link

Please click on the link above or copy and paste it into your browser to submit your details.

Once processed, you will be contacted via your registered address with the university.

Regards,

Finance Department
University of Manchester

The link takes you to an official looking form to fill in - including bank details

I have tried to get to the IP address but the mail system used by the Uni is not co- operating. Any ideas?

Posted: Fri Dec 11, 2015 1:00 pm

Ip address is here:
209.85.213.194

Mountain View, California.

Posted: Fri Dec 11, 2015 1:09 pm

It looks like a regular phishing email and there's not much that can be done.

It may be that an email address at Oxford Brookes has been compromised to send it (#######@brookes.ac.uk is one of the standard email address formats used there), or it may have been spoofed. Note that the "account name" is misleading, but this can simply be done by changing the name field in any email program.

Posted: Fri Dec 11, 2015 1:23 pm

209.85.213.194 is a Google IP address - either the mail was sent from a Gmail account or the wrong IP has been picked up from the headers and the mail has just passed through the Google servers on its way to you.

Nasty looking scam from University mail box:	View next topic View previous topic