PDA

View Full Version : If this is a phishing scam, it's a very sophisticated one, and for what?


Boyo Jim
07-31-2012, 03:30 PM
I received an email, purportedly from WI state Department of Health Services, where I've interviewed for several jobs recently. The subject line said "Operations Program Associate" which is a specific job title I've applied for.

The message was: You have received a secure message

Read your secure message by opening the attachment, securedoc.html. You will be prompted to open (view) the file or save (download) it to your computer. For best results, save the file first, then open it in a Web browser...

First time users - will need to register after opening the attachment. For more information, click the following Help link...

This led me to what an image of a postcard, with a legit WI state logo on it,
labeled "Cisco Registered Envelop Service". It asked me to create an account where I gave my first and last name, created a password, selected a security question from a list and answered the question. That's it -- nothing else was asked.

Then it told me I would need to follow more instructions when I received an "activation email". I haven't received one. Even after going back to the page and requesting it be sent again, I haven't received it. And of course I checked my spam box too.

That set off all kinds of alarms for me. I got hold of someone in their HR department who says that no one by the name on the original email is listed in their staff directory.

But, I went to the Cisco website and they DO in fact have a service called "Cisco Registered Envelop Service".

One other thing -- there is in fact a real person with the same name as the sender (not a common one) living locally, and only one other person by that name in all of America, according to the phone lookup service I used.

So WTF is going on? Who would know I'm applying for work there? And what job I've applied for? Why all these hoops for essentially useless information? If they just wanted to be sure I had an active email address -- shit -- I would have just replied directly to an email with the specifics they had.

And now I'm back to almost thinking it's real.

Boyo Jim
07-31-2012, 03:33 PM
FYI, I used the contact info on the Cisco site to give them details, and the specific links I was led to, and asked if I've been scammed. I'm guessing it's maybe 50/50 whether I'll get a response from them.

GrandWino
07-31-2012, 03:38 PM
Seems legit to me. The name is probably someone that no longer works there, but they haven't gone to the trouble of updating the info in the system.

kayaker
07-31-2012, 03:41 PM
Way too much work for a typical lazy scammer!

MysteryFellow63427
07-31-2012, 03:47 PM
Seems legit to me. The name is probably someone that no longer works there, but they haven't gone to the trouble of updating the info in the system.
Probably a good guess.

However, here's how this could work if it were a phishing scheme: many people use the same password at many different sites. So, a phisher might send a link for you to create a "userid" and "password", hoping you use the same password as your email address. Bingo bango bongo.

Boyo Jim
07-31-2012, 04:07 PM
Turns out it's legit. Bizarre, and absolutely no reason for any of it to be encrypted, though. The "activation email" didn't show up for hours, though the notice pretty much said it would show up in my in box within seconds of creating my account.

Turns out it was details of time and location for an interview that has already taken place. And this person must be brand new, not someone who's already left, because it was sent today.

I have received hundreds of invitations to interview by state agencies through email, replied to and scheduled them and got confirmations back, and no one (myself included) thought it necessary to encrypt any of it. I thought that if it wasn't a scam, it was an offer, the details of which might have been candidates for an encrypted communication. Bummer.

Jeez, of all the big time wasters...

Best Topics: s?awomir rawicz roman metallurgy how pronounce nguyen slitting your throat stealing a base steppin out video livys route jane seymours tits goombah italian invert cane sugar psylocke psychic knife stripper phone first class eurorail hansen's cane soda men face waxing million dollar wound decompose dinosaur volunteers firefighters dial tone app hurricane bow intermediate vision lenses showerhead fun classic or trash banned from argo three way bulbs the wiseguy cookbook big dipper lyrics stove keeps beeping apartment complex mailboxes trash rooms cat vibrates tail natural monovision us's or us' michael jackson full body 2002 oldsmobile silhouette headlight assembly te quiero mucho translated in english do you need a prescription for albuterol are all dmv eye charts the same 5l mini kegs brands of beer large button mp3 player direct deposit how long stitches out too early state farm glass coverage select multiple photos in google photos parlor room in a house carol burnett tim conway elephant story what is the longest river in the usa black and brown hair is a raccoon a marsupial bugs in bob marleys hair delete multiple photos google photos creative names for chili how much does an employer pay for unemployment does rain wash away pollen what does dog taste like reddit crystal meth body odor jerry clower ledbetter family how to clean dingy white towels cancun dos and don ts arm hurts after sneezing how to get water out of an engine everything in moderation greek white stuff on battery how much is 100 pence use speaker wire for power