blog
Parking [ticket | fine] #4721xxx
May 18, 2017
The University is receiving phishing messages with the subject line “Parking ticket” or “Parking fine”, followed by “#” and seven digits beginning with “4721”. The included link points to a compromised document on Google Docs. An example is shown below.
RE: IT Support
May 18, 2017
Invoice 05/17/2017
May 17, 2017
A series of e-mail with compromised attachments are currently being received on campus. The subject line will be “Invoice” followed by a random number, followed by “05/17/2017”. For example, “Invoice 137180 05/17/2017”. The compromised attachment will have a name similar to the subject line. In this example, the attachment would be named “Invoice 137180 05172017.PDF”. […]
Multiple subject lines, various senders – nm.pdf
May 11, 2017
The University has received many recent phishing messages with various subject lines and senders, but all with the attachment “nm.pdf”. The senders are random names and e-mail addresses from domains around the world. Examples of sender addresses are “Sandy <sandy.buckman45@aaalogic.com>”, “Randi <randi.crockett101@friseur-ansbach.de>”, and “Graciela <graciela.potts8364@pullan.co.uk>”. The subject lines are all single words, followed by an […]
IT HELPDESK: EMAIL ACCOUNT VIOLATED
May 4, 2017
IT DEPARTMENT
May 2, 2017
UTHSCSA Help Desk
April 25, 2017
Purchase Order
April 25, 2017
paper [Multiple senders, various attachments]
April 25, 2017
The University has received many recent phishing messages with the subject “paper” and variations of the sender and the attachment name. The senders are random names and e-mail addresses from domains around the world. Examples of sender addresses are “Parker [parker.walpole@osdragankovacevic.edu.rs]”, “Brandie <brandie.lemoine@travelsavvynews.com>”, and “Angela <angela.scholey@queenslandheadshots.com>”. The attachments are all infected PDF files with random […]