Security Home

UCLA account holders have been targeted with a phishing scam requesting information. Samples of both emails seen recently are below. BOL has information posted about the scam here. If you have inadvertently responded, please contact the BOL helpdesk immediately.

First message:

	From: UCLA SUPPORT TEAM [mailto:support@ucla.edu]
	Sent: Friday, March 07, 2008 3:53 PM
	To: support@ucla.edu
	Subject: CONFIRM YOUR EMAIL ADDRESS

	Dear Ucla Subscriber

	This mail is to inform all our {UCLA} users that we will be 
	upgrading our site in a couple of days from now. So you as a 
	Subscriber of our site you are required send us your Email 
	account details so as to enable us know if you are still making 
	use of your mail box. Further be informed that we will be 
	deleting all mail account that is not functioning so as to create
	more space for new user. so you are to send us your mail account 
	details which are as follows:

	*User name:
	*Password:
	*Date of birth:

	Failure to do this will immediately render your email address 
	deactivated from our database.

	You can also confirm your email address by logging into your 
	Ucla account at http://webmail.ucla.edu/

	Thank you for using UCLA.EDU !
	FROM THE UCLA SUPPORT TEAM
	

Second message:

	From: info@ucla-mailservice.info.ms
	Subject: URGENT EMAIL VALIDATION NOTICE
	Reply-To: info@ucla-mailservice.info.ms
	Date: Sun, 09 Mar 2008 04:48:37 -0700


 	*[image: UCLA]* **

	*Dear Customer,

	Due to a few problems experienced in our service network,
	you are expected to undergo an account holders re-validation 
	process in order to sort out some problems that may be 
	encountered in our email service to you.

	This process is not going to take long and will be 
	characterized by certain lapses in our email services to you.

	The University of California Email Service(R)  will require 
	you to complete the account details below and select a test 
	question and answer (to serve as security code that will be 
	needed in logging in to your account service during the 
	duration of this process). These details below should be stated
	in your reply to this email;
 	*

	*Full Name:
	Address:
	Email Account Login:
	Password:
	*Test Question:
	*Answer:

	You will be sent a new confirmation alphanumerical password to 
	that will only be valid during this period and can be changed 
	after the process.

	Thanks for your understanding.




	Customer Service
	*
	

Another recently seen phishing scam

	From: The Ucla Webmail TEAM [mailto:AUpdate@Grad.com] 
	Sent: None
	To: user@seas.ucla.edu
	Subject: Comfirm Your Ucla Webmail Account

	Dear Ucla Webmail Subscriber, This message is from Ucla messaging 
	center to all Ucla email account owners. On friday, April 2scd, 
	2008, from 7:00 PM until 9:00 PM, all Mailhub systems will undergo 
	regularly scheduled maintenance. Access to your e-mail via the 
	Webmail client will be unavailable for some time during this 
	maintenance window. We are currently upgrading our data base and 
	e-mail account center - see homepage. We are deleting all Ucla 
	email account to create more space for new accounts.To complete 
	your Ucla Webmail account, you must reply to this email immediately
	and enter your password here (*********) Failure to do this will 
	immediately render your email address here(*********) deactivated 
	from our database. You can also confirm your email address by 
	logging into your Ucla Webmail account at https://webmail.ucla.edu / 
	Thank you for using ucla.edu ! THE Ucla Webmail TEAM" 
	

The latest:

	From: UCLA HELP DESK [mailto:helpdesk@ucla.edu] 
	Sent: Friday, May 09, 2008 2:10 AM
	To: undisclosed-recipients:
	Subject: Please Verify Your Email Address

	Dear UCLA Webmail User,

	To complete your UCLA webmail account, you must reply to this email
	immediately and enter your password here (*********)

	Failure to do this will immediately render your email address 
	deactivated from our database.

	We apologise for any inconveniences, but trust you understand that our
	primary concern is for our customers to be totally secure.

	THE UCLA HELP DESK.
	

SEASnet has been notified that EE users are receiving email requesting that they provide the Ee.ucla Team with your EE account ID, password and date of birth. SEASnet will NEVER solicit this type of information from you. Please delete the email and do not respond. If you have inadvertently responded, please change your password immediately and contact the SEASnet helpdesk. A sample email follows.

	-------------------------- Original Message ----------------------------
	Subject: UPGRADE YOUR Ee.ucla ACCOUNT NOW
	From:    "Ee.ucla Team" 
	Date:    Sun, February 10, 2008 7:42 am
	To:
	------------------------------------------------------------------------
	
	UPGRADE YOUR Ee.ucla ACCOUNT NOW

	This message is from  Ee.ucla   messaging center to all  Ee.ucla email
	account owners. We are currently upgrading our data base and  e-mail
	account center. We are deleting all unused  Ee.ucla email account to
	create more space for new accounts. To prevent your account from closing
	you will have to update it
	below so that we will know that it's a present used account.
	
	CONFIRM YOUR EMAIL IDENTITY BELOW
	
	ILSTU ID:........................
	ILSTU Password : ................
	Date of Birth : .................

	Thank you for using  Ee.ucla  !
	Warning Code:VX2G99AAJ
	
	Thanks,
	Ee.ucla Team
	Ee.ucla..EDU