Phishing attempt some subscribers have received

From HiveWiki

Jump to: navigation, search

Phishing Attempt: Fake admin notice from the Hivemind

Please take note

An email is currently doing the rounds claiming to be from the hivemind security department. This email is clearly false and a phishing attempt. Please do not click on the link or divulge any account access details such as login/password.

If you get an admin notice it would be from Bretton Vine or Peet Grobler and will be GPG signed. Our GPG keys are available at the following:

For more information on using GnuPG for the signing, encrypting and validation of emails please go to the GnuPG website http:://www.gnupg.org

The false message looks as follows

 Dear Valued Member,
 According to our terms of services, you will have to confirm your e-mail
 by the following link or your account will be suspended within 24 hours 
 for security reasons.
 
 http://www.username@hivemind.net/confirm.php?email=hivemind.net
 
 After following the instructions in the sheet, your account will not be
 interrupted and will continue as normal.
 
 Thanks for your attention to this request. We apologize for any inconvenience.
 
 Sincerely,Hivemind Security Department

Please don't click on the link or respond to this email. An example of a legitimate would look as follows:

 -----BEGIN PGP SIGNED MESSAGE-----
 Hash: RIPEMD160
 
 Hi
 
 Please ignore this admin notice. I need a validly signed email to use on
 the wiki page about the phishing attempts to demonstrate how admin
 notices will be issued.
 
 regards
 --
 Bretton Vine    | skype: brettonvine
 +27.83.633.8475 | bretton@jabber.obsidian.co.za
 Note: New GnuPG key as of July 2005
 http://bretton.hivemind.net/bretton_vine.asc
 
 "It is not enough to have a good mind; the main thing is to use it well."
  - Rene Descartes
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1.4.1 (MingW32)
 
 iD8DBQFDQaIbv7a81jHzHl4RA6UZAJ9tTUA39vArElOmvtzQmLyt6Zf7tACfSW9J
 NsqxEXGxlLmdZU/Z9+e8Hc0=
 =tK4F
 -----END PGP SIGNATURE-----

If you receive account details, or admin notices via the announce list they will be GPG signed and verifiable. (Someone please feel free to expand on these nodes)

Personal tools