Skip to content
CELS Virtual Helpdesk

CELS Virtual Helpdesk

  • Systems Group
  • Blog
  • Documentation

CELS Virtual Helpdesk

CELS Shared Services Systems Group

Documentation Search

Search for:

Most Recent Dispatch

  • Confluence Service Scheduled Maintenance for May 20, 3PM CDT

Site search

Email phishing attempt

March 29, 2022 by Stacey, Craig

I could write more on this, but Hunter’s message to his group covers the salient points. Thanks to all who reported it.
> All,
> Two of you have reported the rather sad phishing attempt included below. (Thank you for reporting this to me – please feel free to > include [email protected] in future reports).
>
> Naturally none of you will fall for this kind of thing, but for the benefit of our newer members I thought I’d go over a couple points that give this kind of thing away: >
> 1. While it says “Argonne National Laboratory” the users return email has nothing to do with the lab. (in this case atlanticbb.net)
> 2. The grammar and spelling is terrible. While not all lab communications were written by Shakespeare, the staff here are generally far more eloquent than this. > 3. The URL you are directed to go to has no relation to any lab web address.
> 4. The word login is hyphenated – this is almost a dead giveaway that its bogus as the phishers know that any incoming email with the word “login” spelled correctly will probably get hung up in the spam/phish filters. >
> Unfortunately on occasion the lab will use outside vendors/tools/collaboration sites that are not “anl.gov” or a related site and are yet legitimate. I can assure you that this makes the sysadmins in general and the cyber security folks in particular very unhappy. >
> Naturally if you ever are in doubt about something being legit please feel free to ask any of the sysadmins around – we’ll either know already from other reports or we’ll find out for you. >
>
>> From: “Argonne National Laboratory” >> Date: April 25, 2013, 17:27:24 CDT
>> To: undisclosed-recipients:;
>> Subject: Hello
>>
>> Your two incoming mails is on pending status due to our recent database upgrade Click,
>> [redacted] to lo-gin for online account upgrade and await Argonne National Laboratory for response,we >> apologies for any inconvenience and appreciate your understanding. >>
>> Sign
>> Ercoli Tracy Lavaan
>> 9700 S. Cass Avenue
>> Argonne IL 60439
>> Phone:630 252-2000
>> Argonne National Laboratory

Post navigation

Previous Post:

Displays in 3178 and 4172 back in operation.

Next Post:

Upcoming IT Maintenance Weekend (May 10-12)

Leave a Reply

You must be logged in to post a comment.

Helpful links

  • Service Catalog
  • Request…
    • a domain name
    • a GCE Unix Group
    • an IP Address
    • a Laptop Build
    • a loaner laptop
    • a JIRA project
    • a Mailing List
    • an Overleaf account
    • a port activation
    • a poster print
    • a reactivation for a returning user
    • an upgrade to Slack Business Plus from Free.
    • a WordPress migration
    • a WordPress site
    • an xgitlab or gitlab migration
    • a Zoom license upgrade

Previous Dispatches

Search Documentation

Search for:

Privay & Security Notice

Privacy & Security Notice

Site tools

  • Log in
  • Entries feed
  • Comments feed
  • WordPress.org
© 2025 CELS Virtual Helpdesk | WordPress Theme by Superbthemes