home | list info | list archive | date index | thread index

Re: [OCLUG-Tech] SECURITY ALERT: Phishing Attack (Fwd: Email Security Upgrade)

  • Subject: Re: [OCLUG-Tech] SECURITY ALERT: Phishing Attack (Fwd: Email Security Upgrade)
  • From: Richard Guy Briggs <rgb [ at ] tricolour [ dot ] net>
  • Date: Fri, 8 Jul 2011 12:18:25 -0400
On Fri, Jul 08, 2011 at 12:04:19PM -0400, Brenda J. Butler wrote:
> 
> Yes, I'm trying to determine if a notice I got from GOC (paper, via
> postal mail) is valid ... it looks real, but the person and phone
> number are not in GEDS (Government Electronic Directory Service).
> Gut feel is that it's real, but how on earth can I verify without
> using the phone numbers on the letter?
> 
> ... I've asked my MP but no answer yet.  I might need to call back
> and ask again.

I don't think I'd go through my MP, but that's one route.  I'd try to
contact via the published contact information for that GOC
ministry/department in the blue pages.

Problem is frequently that said institutions are training people to
ignore this type of careful checking by employing non-standard domains
and contractors.


There are similar problems with door-to-door salesfolks for third-party
energy resellers who ask to see your energy bill to get account
information.

I've also recently gotten a number of automated phone calls from credit
card debt consolidators that sound official without actually naming your
credit card, then ask you for those details.  Whenever I ask on behalf
of whom are they calling, they hang up immediately.

It is everywhere.

> bjb
> 
> On Fri, Jul 08, 2011 at 09:19:59AM -0400, Raj wrote:
> > I don't think there's any harm in repeating these warnings.  If the
> > phishing emails didn't work, they wouldn't be there in the first place -
> > there are people still falling for them.  And don't forget that spear
> > phishing can get quite sophisticated.
> > 
> > --Raj.
> > 
> > 
> > On 11-07-08 09:12 AM, Singer X.J. Wang wrote:
> > > I'll chime in here and agree with Richard here. Should we start warning
> > > about every security risk?
> > > 
> > > - Do not shout out your DEBIT CARD NUMBER and PIN for your debit card.
> > > - Do not write down the DEBIT CARD NUMBER and PIN of your debit card on a
> > > piece of paper and mail it to Richard Briggs
> > > - Do not write down the DEBIT CARD NUMBER and PIN of your debit card on a
> > > piece of paper and mail it to me
> > > - Do not write down the DEBIT CARD NUMBER and PIN of your debit card on a
> > > piece of paper and mail it to Stephen Harper
> > > - Do not write down the DEBIT CARD NUMBER and PIN of your debit card on a
> > > piece of paper and mail it to Jay Leno
> > > - Do not write down the DEBIT CARD NUMBER and PIN of your debit card on a
> > > piece of paper and mail it to Madonna
> > > 
> > > These phishing emails are so normal now and everyone (specially those on the
> > > list) knows about it that there's no need to email it again.
> > > 
> > > On Fri, Jul 8, 2011 at 08:58, Shawn H Corey <shawnhcorey [ at ] gmail [ dot ] com> wrote:
> > > 
> > >> On 11-07-08 08:36 AM, Richard Guy Briggs wrote:
> > >>> Even if I am my own system administrator?!?
> > >>>
> > >>> Even if I don't even have an account with said institution?!?
> > >>>
> > >>> Even if I've already received thousands of such emails already?!?
> > >>
> > >> <sarcasm>I'm sorry I ruined your day by post an alert about email
> > >> phishing.  After all, since you know everything there is to know about
> > >> security, why would anyone else on this list be interested in it?</sarcasm>
> > >>
> > >> Such rudeness is not appreciated.  Please refrain for doing so in the
> > >> future.

	slainte mhath, RGB

--
Richard Guy Briggs               --  ~\    -- ~\            <hpv.tricolour.net>
<www.TriColour.net>                --  \___   o \@       @       Ride yer bike!
Ottawa, ON, CANADA                  --  Lo_>__M__\\/\%__\\/\%
Vote! -- <greenparty.ca>_____GTVS6#790__(*)__(*)________(*)(*)_________________