Phishing mails from sapmail.com - be careful

[Former Member]

Did anyone else get a mail from sap@mailsap.com (Mike Griffiths) asking to install a server certificate via a link?

The download is a GET= parameter against SMP, but the source is unknown and requests you to anstall a server certificate...

I reported it to SAP. If anyone else gets it then I suggest waiting until the real SAP confirms.

Cheers,

Julius

[krscheffler · Accepted solution]

Hi Julius,

Thanks for your question.

I can confirm that the email that was sent is legitimate.  We also posted a blog on SCN that contains the same/similar information: http://scn.sap.com/community/businessobjects-web-intelligence/blog/2013/09/05/important-update-for-c...

There is an article that references the digital certificate information on the SAP Support Portal that was embedded in the email.  It can be found here: http://service.sap.com/java-webi-certificate

Thanks,

Kristen

[Former Member · Accepted solution]

Ok. Thank you!

[former_member233385 · Accepted solution]

Hi Basis Expert,

Even we have received the same message from SAP.

But when i have gone thru the link

http://service.sap.com/java-webi-certificate

As per the link the following SAP BI Platforms are affected by this message

BI4.0

XI 3.1

But from BI side we are on -> EHP1 for SAP Netweaver 7.0 (Higher version)

From the XI side we are on -> Netweaver 4.0 (XI 3.0 - Lower version)

So i think it is not applicable for us.

But i would request your suggestion.

Regards,

Anil

[Former Member]

Hi Julius,

when you log in into the SAP Service Marketplace an go to the SAP Support Portal you can see these news:

"SAP AG Java Certificate (for Web Intelligence) is expiring

When opening or editing a Web Intelligence report using the Rich Internet Application (Java Report Panel), end users will see a security warning. The SAP BI 4.0 Platform version is affected by this message. Our development team has been working diligently to create fixes for the affected product versions."

So, it's no phishing mail.

Regards,

Claudia

[Former Member]

Hi Julius,

I got that one, too. Around 8 hours ago.

Regards,

Claudia

[Former Member]

I have also received that email.

All the newsletters about Technology, Business Process come from same email address.

I didn't think it was phishing as it was like other newsletters.

Every such newsletter links to sap.com/mk/get?

So sap.com/mk/get could be just a redirect server, meant to track amount of traffic newsletters are generating.

[Former Member]

It seems like it is legitimate, but not very corporate identity conform and overkill to send it to the whole of SDN...

I guess Mike was just trying to do the needful..  🙂

Cheers,

Julius

[Colleen]

I received an email overnight about Web Intelligence Digital Certificate Issue also from Mike Griffiths

It advises a Java runtime certificate is going to expire 8 Sept and provides a link to deploy a new patch.

[RafkeMagic]

I've seen something like that pass by as well...