Phishing Examples

PHISHING EXAMPLE: WORK FROM HOME / BERKELEY PAID JOB OFFER

September 10, 2021
Dear Student, We got your contact through your school database and I'm happy to inform you that our reputable company Cisco Systems Inc® is currently running a student empowerment program. This program is to help devoted and hardworking students secure a part time job which does not deter them from doing any other, you just need a few hours to do this weekly and with an attractive weekly wages. KINDLY EMAIL BACK WITH YOUR PERSONAL EMAIL ADDRESS IF INTERESTED IN THIS JOB POSITION.

Fake Cal Store on Instagram

January 19, 2022
Beware of fake Cal Stores on Instagram or other social media platforms.

Severe Software Vulnerability in Apache's Java Logging Library

December 14, 2021

The UC Berkeley Information Security Office is responding to a newly revealed severe software vulnerability in Apache's Java Logging library, Log4J.

This vulnerability affects a broad range of websites, applications, and devices, making it extremely dangerous, and digital systems across the internet are affected. What is Log4j?

...

Recognizing & Avoiding Job Scams

September 22, 2021
Are you on the lookout for flexible, part-time employment to help cover school expenses? If so, watch out for scams.

Between the COVID-19 pandemic and high unemployment rates, the pressure to find a job may create more pressure for you to find work quickly. UC Berkeley has received numerous reports of employment scams where the sender impersonates Berkeley professors, researchers, and/or university departments. Some scams are easy to spot but how do you know who to trust?

Start with these basic guidelines: Be skeptical. If a job...

Financial Phishing Attacks

October 11, 2021
Watch out for financial "spear phishing" emails.

These may look like they come from a supervisor or manager and request that you send funds, transfer money, provide banking information, buy gift cards, or provide something of value to the sender.

Spear phishing attacks have increased dramatically over the past few years as scammers get more sophisticated. UC employees have been targeted on multiple occasions. Scammers send realistic looking...

Phishing Example: U.S. Dept. of Labor "Record Update"

January 18, 2016
This is an urgent request to update your employment record at the U.S Department of Labor.

Phishing Example: IRS Service "Important Update"

January 15, 2016
As we prepare to start the 2016 Tax filling season, we have undergone slight changes in the filling process to make filling for your refund easier and to prevent unnecessary delays. Part of the changes include updating our database with your information. Please ensure to carefully complete this verification to avoid hitches in processing your refund. We have sent you an attachment, open it and follow the steps to verify your profile.

Phishing Example: DHL Express Document

January 15, 2016
Dear xxx@berkeley.edu Your parcel (shipping document) arrived at the post office. Here is your Shipping Document/Invoice and copy of DHL receipt for your tracking which includes the bill of lading and DHL tracking number, the new Import/Export policy supplied by DHL Express. Please kindly check the attached to confirm accordingly if your address is correct, before we submit to our outlet office for dispatch to your destination. Label Number: E727D5151D Class: Package Services Service(s): Delivery Confirmation Status: eNotification sent Find attached the full statement information and a full list of outstanding Invoices. Your item will arrive in two (2) days time, and within the agreed credit term as stated on your Invoice. We would like to thank you for using the services of DHL Express. Read the enclosed file for details.

Phishing Example: "Paperless W2"

January 6, 2016
Dear: Account Owner, Our records indicate that you are enrolled in the University of California paperless W2 Program. As a result, you do not receive a paper W2 but instead receive e-mail notification that your online W2 (i.e. "paperless W2") is prepared and ready for viewing. ​​ Your W2 is ready for viewing under Employee Self Service. Logon at the following link: Click Here to Logon If you have trouble logging in to Employee Self Service at the link above, please contact your Payroll Department for support. If you would like to un-enroll in the Paperless W2 Program, please logon to Employee Self Service at the link above and go to the W2 Delivery Choice webpage and follow the instructions.

Phishing Example: Spear Phishing Attack "Articles"

January 2, 2016
Dear Dr.