We’ve been seeing quite a few of these today so we’re putting up this notice to let everybody know that, yes, this is fraud. Don’t give them your login info.
The “From:” address on the example we’re looking at right now is:
“abuse@stanford.edu” <abuseteam8@gmail.com>
If you look at just the “pretty” address (the part in quotes) you might think the message comes from “abuse@stanford.edu” but the part that matters (in the angle brackets) is actually “abuseteam8@gmail.com”. You might be wondering why Stanford’s abuse team would be sending from gmail.com? The answer is: for a notice like this, they wouldn’t. This is fake.
