Did anyone else get this email?
You are receiving this email because you are registered for RSA® Conference 2009. Your account information needs to be activated so that you can take full advantage of all the Conference activities including access to the Conference Personal Scheduler and access to the Conference wireless network while on-site. … Please take a moment now to log-in and complete your account activation athttps://sso.rsaconference.com/sso/LogIn.jsp using the following temporary password – %_DWqwet(M. You will then be prompted to confirm your profile information and reset your password. Your username is not included in this email for security purposes. If you are unsure of what your username is, you can retrieve it online at https://sso.rsaconference.com/sso/RetrieveUserName.jsp. You can log in to your account anytime at https://sso.rsaconference.com/sso/LogIn.jsp. … For more information on RSA Conference Single Sign-on, please visit our website or contact us atloginhelp@rsaconference.com. Sincerely, RSA® Conference Team
Wow, is this a phishing attempt out to the RSA list? Awesome!
Reader interactions
6 Replies to “RSA Conference: For Real?”
Yeah … and it was only after I submitted both my credit card details and PIN number that I realised that I’m not even going to the RSA conference.
Adrian,
This is fairly common I think.
I get emails like these all the time from my Nigerian penpal.
Oh by the way, I am about to become fairly rich soon and was wondering if you think the Windows Firewall is a good product to spend money on?
Thank you and have a great April 🙂
Nick
(all jokes aside, have a good day).
It appears I am wrong. While I figured this was Phishing because:
– Surely a security company knows clicking email links are risky
– Bad punctuation and misspellings on corp are a hint the email is bogus
– When I typed in the link manually I generated an Apache error.
While I did not see any suspect characters on the link itself, that was enough to be suspicious. But it appears that RSA reset the passwords on many accounts and this was how they announced it. I think it was both legit and poorly executed.
-Adrian
Phishing an RSA Conference account? So they can sign you up for sessions you’d really rather not attend?
That would be one really bored phisher
I got one of these a few weeks after signing up for RSA, too. All the links were valid, so I tested it out, and it does seem to be for RSA. It’s very odd that you create a login to register and then have to go enroll it in their SSO.
This is really funny! Especially if it’s someone phishing for embarrassing data to present at the next RSA conference 🙂