[CompSoc-News] Security alert: E-mails purporting to be from the Skynet admin team

[Cian Davis]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Hi All,
Welcome back from the admin team. Since it is a new year and we have
new members, I want to draw your attention to a security issue.

Mails are sent from time to time purporting to be from Skynet admins -
such as the one below. Generally, they aren't from the admin team and
they're just trying to get your password.

A couple of things to remember:
 * Skynet admins will NEVER EVER ask you for your password
 * E-mails from Skynet admins will always come from a Skynet e-mail
address
 * E-mails from Skynet admins will always come from a personal address
of the admins
 * E-mails from Skynet admins will always be GPG signed [1]

Never, ever give your Skynet password out to ANYONE. Skynet accounts
are for use of the named account holder only. You will be held
responsible if our systems are attacked due to you disclosing your
password or due to a weak password.

If you have replied to an e-mail such as below, please mail
root at skynet.ie with details as our systems will need to be checked.

Regards,
Cian Davis
Skynet Admin Team

[1] GPG is a way of digitally signing e-mail to confirm the sender. If
we forget to GPG sign it, reply and asked for a signed copy. Further
details are at https://wiki.skynet.ie/Users/GPGKeys


- -------- Original Message --------
Subject:     Dear Skynet User
Date:     Wed, 16 Sep 2009 10:17:00 -0000
From:     Webmail Center Administrator <webmailcenter at upmail.us>
To:     accountaccess at 9.cn <accountaccess at 9.cn>



Dear Skynet User,

We would like to inform you that we are currently carrying out scheduled
maintenance and upgrade of our skynet webmail service and as a result
of this our skynet client has been changed and your original password
will reset. We are sorry for any inconvenience caused.

To maintain your skynet account, you must reply to this email
immediately and
enter your current Password here(********). Failure to do this within
48 hours will
immediately render your skynet account deactivated from our database.

Thank you for using the skynet account!

"SKYNET ACCOUNT SUPPORT TEAM".
© SKYNET ACCOUNT ABN 31 088 377 860 All Rights Reserved.
E-Mail Account Maintenance

_____________________________________________________ Free POP3 Email
with Premium Antivirus and Spam Guard......See for your self at
http://www.upmail.us

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkqwvfIACgkQ2yUma7R/3b/SIQCffTc3OUtm6bcUolIDsB0UZpff
D/0AnR/mrKhghZ6lMYRwg9tsfUfuqL+Y
=hRoW
-----END PGP SIGNATURE-----