Uncategorized

COVID-19 Phishing Sample #2

March 23, 2020

1 – From address is inconsistent with name 2 – Generic greeting 3 – 700,000 euros == if it looks too good to be true, it probably is 4 – Bank secretary with a Gmail.account + many, many punctuation and spelling errors

COVID-19 Phishing Sample #1

March 23, 2020

From address claims Federal agency (CDC), but displays incorrect address. The attachment contains malicious code to infect the user’s computer.

You can beat COVID-19 with these preventive measures

March 4, 2020

This company sells products claiming to ease or reverse the effects of allergies.  The company appears to be using the current health crisis to direct users to AllerPop’s web site for an article and, indirectly, to their products.  View at your own risk!

URGENT REQUEST

February 25, 2020

From: [username].uthscsa@gmail.com Date: February ##, 2020 Subject: URGENT REQUEST Available? What number can I text you at?    

Notice: Anti-Spam Update request

February 20, 2020

New Outlook Web App for Staff/Employee

February 3, 2020

Email validity check failure

January 10, 2020

Reset Password

January 7, 2020

Mailbox password expired

January 7, 2020

“UT Health San Antonio Self Service” or “Maintain Outlook”

November 29, 2019

Compromised user account used to send phishing messages.  Link goes to a fake UT Health SA site (at bottom) designed to steal credentials and possibly compromise the visiting computer.  Some versions have only the “In Order to …” portion of the message body. Fake UT Health SA web site.