The following are examples of phishing email sent from a Birmingham account that had been compromised. If you look carefully at the content it should be clear that the messages are not genuine. We think that the fact that it originated from within the University led some people to believe that it was real.
Here is a breakdown of some of the features that indicate that the email was bogus. The sender has been changed to a fictitious name for confidentiality.