Subject “img_####.pdf”, multiple senders
May 24, 2017
The University is currently receiving phishing messages from random senders with the subject line beginning with “img_” (both upper- and lower-case) followed by four random numbers and “.pdf”. The messages contain infected attachments with the same name as the subject line.
Re: Tax Exemption Notification
May 23, 2017
IT Announcement
May 19, 2017
Parking [ticket | fine] #4721xxx
May 18, 2017
The University is receiving phishing messages with the subject line “Parking ticket” or “Parking fine”, followed by “#” and seven digits beginning with “4721”. The included link points to a compromised document on Google Docs. An example is shown below.
RE: IT Support
May 18, 2017
Invoice 05/17/2017
May 17, 2017
A series of e-mail with compromised attachments are currently being received on campus. The subject line will be “Invoice” followed by a random number, followed by “05/17/2017”. For example, “Invoice 137180 05/17/2017”. The compromised attachment will have a name similar to the subject line. In this example, the attachment would be named “Invoice 137180 05172017.PDF”. […]
Multiple subject lines, various senders – nm.pdf
May 11, 2017
The University has received many recent phishing messages with various subject lines and senders, but all with the attachment “nm.pdf”. The senders are random names and e-mail addresses from domains around the world. Examples of sender addresses are “Sandy <sandy.buckman45@aaalogic.com>”, “Randi <randi.crockett101@friseur-ansbach.de>”, and “Graciela <graciela.potts8364@pullan.co.uk>”. The subject lines are all single words, followed by an […]
IT HELPDESK: EMAIL ACCOUNT VIOLATED
May 4, 2017