Translate

Soft phishing, and why anyone should know GoogleScholar

I still have a university e-mail address, for fiscal reasons. Hence, I still get what we call in German Initiativbewerbungen, not solicited applications for joining my working group (I never had one) from people in countries not as happy as Austria. And the one or other phishing mail.

If from some poor pal in the underdeveloped (scientifically) world, I nicely reply and give them feedback, usually how futile such an action is given the generally poor financing situation in my fields.

I also still get the usual phishing mails send around within the e-mail system of Vienna University telling me that my e-mail folder is full (which it isn't) and asking me to log-in to ensure the service is not ceased. Naturally not referring me to my employee account (the University of Vienna has a very nice system for employee services) but some made-up mask to just dump your log-in details.

Usually one gets a mail a couple of days later from the actual Datenverarbeitung-guys (the informatics department) warning the scientists not to do so.

Funny, how many highly educated people can't distinguish between fraud and genuine.

A bit outside the usual, I got this interesting soft-phishing mail using the I-search-for-a-position-initiative.

"Dr. Martin Kroll" 's mail to me. Thank you very much for your confidence indeed.

The typical warning signs (embedded link, mismatch between the sender's name and name in the sending email address) are missing. But obviously it's not genuine.

First, there is no "uniklinik-bio.eu"; and institutional email addresses don't include (anymore these days) neutral lab designators like "lab3". In Tübingen, Stockholm and Vienna where I worked it was always just yourname@institutionURL. 

If you search for an URL and the first link you get is a bit fishy e-mail address line, then it's probably phishy.

Second, the only persons I know that use uppercase letters in English texts for non-names "University", "Professor", "Dean", are the toddler in the White House, the yellow press, and predatory journals, especially those from India.

Third, no real university has excess professor positions waiting for Initiativbewerbungen. Those that have to be filled are officially announced with all the contact details you need. And, at least in my fields, those with a chance to get it, have been informed in advance something will be coming up.

Last, "Dr. Martin Kroll" is a nice Austrian name; why would he address a fellow Austrian in English using wrong uppercase writing? We German-speaking people are usually very proud of our uppercase substantives and don't use them lightly when shifting to English. When I was stationed in Austria, we still addressed each other very formally: a Sehr geehrter Herr Dr. Dipl. geol. ... with kind regards, Ihr Dr. Mag. Martin Kroll would have been much less conspicuous.


How to quickly check out alleged scientists?

A tip I gave to my cousin after she showed me Discovery's ancient-megashark-has-survived "documentary" (Snopes). Whenever a TV shows, news outlets etc hosts, shows, or refers to a scientist there's a simple quick check-up.

Just type the name into GoogleScholar.

If nothing, or nothing in the alleged scientific area, pops up, it's not a scientist. For "Martin Kroll" you actually get some hits, papers authored by "M H Kroll", a patchy scientific record in medicine with papers in the 90s and early zeroes, unlikely the "Dr. Martin Kroll" now searching for contacts to fix his university professorship. For how it should look like, try "Guido Grimm" instead (note: I retired early, three years ago).


No comments:

Post a Comment

Enter your comment ...