Received Email from LicenseKey.Care-Lawson@infor.com

[Robert Milfajt]

Suspect, SPAM/Phishing/malware.  Can you confirm, and if it is, spread the word so that other customers don’t click it accidentally?

Thanks,

Robert Milfajt
Northwestern Medicine
Chicago, IL

Topic

[Jim Rawls]

We received this too.

[Bob Richardson]

One and All,

Received and deleted – not a typical email from Infor.

Unsolicited PDF attachment.

Beware!

[Jeff Drumm]

Also received, and created an incident reporting its receipt in Xtreme. The headers seem right for Infor as the source, although there’s not much in the way of routing information.

I think they need to do a bit of scrubbing.

[Marc Pleijers]

Hi,

We are reseller for Cloverleaf in The Netherlands.

When we request a license for either a new customer or when an existing customer upgrades to a new release, we will receive an email from LicenseKey.Care-Lwason@infor.com as a reply.

That email has another email as attachment. The attached email has license.dat (the requested license ) as attachment and the mail body contains the installation instructions for the license.

So this sender address is actually being used for serious cloverleaf business.

We don’t classify it as spam.

Kind Regards,

Marc Pleijers

Product Manager/ Senior Integration Consultant/ Cloverleaf Trainer

ENOVATION BV (member of the VANAD GROUP)

The Netherlands

Marc Pleijers
Senior Integration Consultant
Enovation BV
The Netherlands

[Robert Milfajt]

True, but in this case we haven’t requested a license modification, so this message, which had spelling errors seemed suspicious.  I’m sure if one clicks on the attachment, their PC will become infected with some malware.  My point is to alert Infor that someone may have hacked their site and got a customer list, and that they might want to alert their customer base about this.

Robert Milfajt
Northwestern Medicine
Chicago, IL

[Jeff Drumm]

Robert Milfajt wrote:

True, but in this case we haven’t requested a license modification, so this message, which had spelling errors seemed suspicious.

[Author]

Replies