Viewable by the world
Group Access to Cyber Security Website
Can VIEW the space: all-lbnl-users ,  anonymous , 
Can EDIT the space:
Can ADMINISTER the space:

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Updated past phishing campaigns

...

2016-10-08: Urgent - Email Reactivation

 

Image RemovedThis email was our first phish and intended to test the waters. It emulated the common phishing emails that are vague, urgent, and not necessarily relevant. It had an fake sender address that appeared to be from within LBNL.

Sender: compmaint@lbl.gov - Computer Maintenance

Link:  http://lbl.gov.webaccess-alerts.net/

 

Expand
titleThe Email

Image Added

Expand
titleThe Education

...

Page

Image Modified

 

2016-12-06: Google Document Invitation to edit

The Email: 

Image Removed

Sender: [email protected]

Landing Page:

Image Removed
Education Page: 

This email was intended to get users to focus on the URL and demonstrate that it is often trivial to make a email or web site that looks like ones you trust. It mimicked the HTML of a real "Invitation to Edit" email sent by Google Drive as well as the LBL login page. The email appeared to be from an LBL employee (although this user doesn't exist).

Users were expected to notice the non-LBL link that email directed to or check the existence of the sender.

Sender: [email protected] -  Frank Zuidema

Link:  http://lbl.gov.invoicenotices.com

 

Expand
titleThe Email

Image Added 

Expand
titleThe Landing Page

Image Added 

Expand
titleThe Education Page

Image Added 

 Image Removed