Hi all,
Check very carefully, a few years ago our accounts department got a very
legitimate looking bill seemingly from Bruker (location Poland even though
we deal with Germany) with the technician’s name. Fortunately they
checked with me before paying. It was a scam.
Regards,
K. Klika
________________________________________
> From: main_at_ammrl.groups.io on behalf of Spin-Doc
> Sent: 18 December 2024 03:03:02
> To: main_at_ammrl.groups.io
> Cc: ammrl_at_groups.io
> Subject: Re: [AMMRL] Creative methods of phishing - beware ! - might be worth taking note
Hi,
I agree with Mike - this doesn’t look like phishing to me.
Typically the from/reply-to address closely matches but isn’t quite
the original address: For example I got fraud emails from something like
fedex-help.co instead of fedex.com. Also often found are embedded web links
they want you to click which don’t lead to the original web site like
bruker.com or fedex.com. Watch out for (intentional!) spelling “
mistakes” in web or email addresses, these may also lead to faked
web pages, skimming off credit card details and the like…
Have a nice festivity time,
Bert
-> Sent via mobile <-
Spin-Doc
Magnetic resonance equipment, service, training & more
Dr. rer. nat. Bert Heise
Owner, applications scientist
Kiefernweg 13
58239 Schwerte
Germany
Web: http://www.spin-doc.net
Mail: bert.heise_at_spin-doc.net
Phone: +49-171-5135315
Representing MestreLab, Stelar & Barthel HF
Am 17.12.2024 um 18:23 schrieb Michael Groves via groups.io:
Hey Rajan,
From the screenshot, this looks legitimate to me. That image matches one
of our SAP reports and the customer number is correct. For some reason one
of the addresses we have for UW is a PO Box in Salt Lake. I don't know what's
up with our records, but that's accurate.
Natalia is one of our Accounts Receivable people. That AR email address is
legitimate. And it looks like they'd be happy with a copy of your tax exemption
certificate. If there's not something else there that we can't see that
indicates it's phishing then I'd believe this one. You can always email that
address directly and request more detail/confirmation.
Cheers,
Mike
On Tuesday, December 17, 2024 at 06:58:12 AM MST, DrSpin via groups.io wrote:
Dear Spinlanders
Somehow the holiday season does see an uptick of phishing scams via mail
to my Inbox and many of you might have seen the pattern at your end.
But the scammers are getting more creative every day.
I am just adding a screen grab cut-and-paste for safe transmission of this
example. This ostentatious mail from 'Bruker' is a total scam. Beware of
such attempts. (The only charitable interpretation is : if it's not a
scam, then this genuine pending payment happens in a parallel universe and
a parallel Plante Earth where University of Washington has moved to Salt
Lake City :-D ! )
Thank you and Happy Holidays !
Rajan
===== EXAMPLE OF PHISHING SCAM SENT TO MY INBOX=======
==========
--
____________________________________
Rajan K Paranji, Ph.D. NMR Services Manager Department of Chemistry Room 65 ,
Bagley Hall University of Washington Seattle, WA 98195 phone : 206 685 2581
email: rajanp_at_uw.edu
____________________________________
-=-=-=-=-=-=-=-=-=-=-=-
Groups.io Links: You receive all messages sent to this group.
View/Reply Online (#1948): https://urldefense.com/v3/__https://ammrl.groups=
.io/g/main/message/1948__;!!PvDODwlR4mBZyAb0!WdTSv2Nl33bI-KVAf9uIXgYah0RIwr=
twtwB_4Zz550xJBrLJSfmNhZCq8j1QqXnAY_DrbFa-Ha_xL9LvPtbfbMgN$
Mute This Topic: https://urldefense.com/v3/__https://groups.io/mt/110162773=
/7559972__;!!PvDODwlR4mBZyAb0!WdTSv2Nl33bI-KVAf9uIXgYah0RIwrtwtwB_4Zz550xJB=
rLJSfmNhZCq8j1QqXnAY_DrbFa-Ha_xL9LvPm1oHjt8$
Group Owner: main+owner_at_ammrl.groups.io
-=-=-=-=-=-=-=-=-=-=-=-
Received on Wed Dec 18 2024 - 10:00:59 MST