Subject “img_####.pdf”, multiple senders

May 24, 2017

The University is currently receiving phishing messages from random senders with the subject line beginning with “img_” (both upper- and lower-case) followed by four random numbers and “.pdf”.  The messages contain infected attachments with the same name as the subject line.

IT Announcement

May 19, 2017

Parking [ticket | fine] #4721xxx

May 18, 2017

The University is receiving phishing messages with the subject line “Parking ticket” or “Parking fine”, followed by “#” and seven digits beginning with “4721”. The included link points to a compromised document on Google Docs. An example is shown below.

RE: IT Support

May 18, 2017

Invoice 05/17/2017

May 17, 2017

A series of e-mail with compromised attachments are currently being received on campus. The subject line will be “Invoice” followed by a random number, followed by “05/17/2017”. For example, “Invoice 137180 05/17/2017”. The compromised attachment will have a name similar to the subject line. In this example, the attachment would be named “Invoice 137180 05172017.PDF”. […]

Multiple subject lines, various senders – nm.pdf

May 11, 2017

The University has received many recent phishing messages with various subject lines and senders, but all with the attachment “nm.pdf”.  The senders are random names and e-mail addresses from domains around the world.  Examples of sender addresses are “Sandy <>”, “Randi <>”, and “Graciela <>”.  The subject lines are all single words, followed by an […]