%PDF-1.3 1 0 obj << /Type /Catalog /Outlines 2 0 R /Pages 3 0 R >> endobj 2 0 obj << /Type /Outlines /Count 0 >> endobj 3 0 obj << /Type /Pages /Kids [6 0 R 13 0 R ] /Count 2 /Resources << /ProcSet 4 0 R /Font << /F1 8 0 R /F2 9 0 R /F3 10 0 R /F4 11 0 R >> /XObject << /I1 12 0 R /I2 15 0 R >> >> /MediaBox [0.000 0.000 612.000 792.000] >> endobj 4 0 obj [/PDF /Text /ImageC ] endobj 5 0 obj << /Creator (DOMPDF) /CreationDate (D:20250701071242+00'00') /ModDate (D:20250701071242+00'00') /Title (Report 07-2025) >> endobj 6 0 obj << /Type /Page /Parent 3 0 R /Contents 7 0 R >> endobj 7 0 obj << /Length 2311 >> stream 0.702 0.800 0.816 rg 34.016 34.016 543.969 723.969 re f 1.000 1.000 1.000 rg 45.266 -7.273 521.469 754.007 re f 0.773 0.773 0.773 rg 0.773 0.773 0.773 RG 45.266 746.734 m 566.734 746.734 l 565.984 745.984 l 46.016 745.984 l f 566.734 746.734 m 566.734 -7.273 l 565.984 -7.273 l 565.984 745.984 l f 45.266 746.734 m 45.266 -7.273 l 46.016 -7.273 l 46.016 745.984 l f 0.200 0.200 0.200 rg BT 61.016 693.716 Td /F1 14.4 Tf [(PHISHING SCAM DISGUISED AS THE UNIVERSITYS SINGLE-SIGN ON )] TJ ET BT 61.016 676.134 Td /F1 14.4 Tf [(PAGE)] TJ ET 0.400 0.400 0.400 rg BT 61.016 647.326 Td /F2 9.0 Tf [(Posted on )] TJ ET BT 104.045 647.326 Td /F3 9.0 Tf [(January 01,1970)] TJ ET BT 173.588 647.326 Td /F2 9.0 Tf [( by )] TJ ET BT 188.096 647.326 Td /F3 9.0 Tf [(IT Communications)] TJ ET 0.153 0.153 0.153 rg BT 61.016 619.837 Td /F4 9.0 Tf [(Due to the vigilance of an observant personnel member from the US Business School, we have encountered a dangerous )] TJ ET BT 61.016 608.848 Td /F4 9.0 Tf [(phishing scam being sent from a )] TJ ET BT 193.073 608.848 Td /F1 9.0 Tf [(compromised UNISA account)] TJ ET BT 319.595 608.848 Td /F4 9.0 Tf [(.)] TJ ET BT 61.016 588.859 Td /F4 9.0 Tf [(The Subject is )] TJ ET BT 120.542 588.859 Td /F1 9.0 Tf [(Dear SUN E-mail User Copyright 2018 Stellenbosch University)] TJ ET BT 404.258 588.859 Td /F4 9.0 Tf [( which should immediately raise )] TJ ET BT 61.016 577.870 Td /F4 9.0 Tf [(eyebrows. The phishing email warns you about the pending expiration of your e-mail account and prompts you to click )] TJ ET BT 61.016 566.881 Td /F4 9.0 Tf [(on a link to reactivate it.)] TJ ET BT 61.016 546.892 Td /F1 9.0 Tf [(See below what the mail looks like:)] TJ ET q 375.000 0 0 231.750 61.016 303.944 cm /I1 Do Q BT 61.016 286.153 Td /F4 9.0 Tf [(The danger is that the phishing scammers have perfectly forged the universitys )] TJ ET BT 379.652 286.153 Td /F1 9.0 Tf [(SINGLE SIGN-ON)] TJ ET BT 454.163 286.153 Td /F4 9.0 Tf [( page, that is used by )] TJ ET BT 61.016 275.164 Td /F4 9.0 Tf [(students an personnel to access the portal pages, the my.sun.ac.za page, SUNLearn etc., as you can see below. Not )] TJ ET BT 61.016 264.175 Td /F4 9.0 Tf [(many people will notice that the address is not a university address, neither is it secure.)] TJ ET endstream endobj 8 0 obj << /Type /Font /Subtype /Type1 /Name /F1 /BaseFont /Helvetica-Bold /Encoding /WinAnsiEncoding >> endobj 9 0 obj << /Type /Font /Subtype /Type1 /Name /F2 /BaseFont /Helvetica-Oblique /Encoding /WinAnsiEncoding >> endobj 10 0 obj << /Type /Font /Subtype /Type1 /Name /F3 /BaseFont /Helvetica-BoldOblique /Encoding /WinAnsiEncoding >> endobj 11 0 obj << /Type /Font /Subtype /Type1 /Name /F4 /BaseFont /Helvetica /Encoding /WinAnsiEncoding >> endobj 12 0 obj << /Type /XObject /Subtype /Image /Width 500 /Height 309 /ColorSpace /DeviceRGB /Filter /DCTDecode /BitsPerComponent 8 /Length 25063>> stream JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82 C    !'"#%%%),($+!$%$C   $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$5" }!1AQa"q2#BR$3br %&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz w!1AQaq"2B #3Rbr $4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz ?&A3W9'ַ<3w{cFzXnC5N?~kV6vKW/ x2۸?Z)/dR*o2Kk}=Vv3γB[mpQO;\$H$ѹ|nNV0sm0fiUp OZYH*&6#~ۘO^(/}J:%ZсR)g2#u-ycGл&K8LB@?^OL!8#vйN~f7b̬ȎsDJ/ϻg;F{]jS n%(@6HP0Gow=92!nSjSRJ΢rvn|礟Ѡ/4bӑv3?Λzh}9c=yWtQG,{qtG/(vi.奶feaC<[{B+SZ뗖l(esDZRI(X˹ 8 >u#9rcIVEyk 'g{^^ Prz{R]XqIW3*w6B.2K*/>lI#,jܺP6B*08x-L=i<{zHn@?x?:l|jkw-#HV"̡~8#}߈.7]Qg:fSdRR<҉EF[q32LJHxt׾*[ol!2OS9_a.r3glp3*H h?nEpr~]\Ѣ"Ē14__ʢRu ;)UM5Mx=*clDX@ۀx9>TnRe$;1fW<B2H+wM镜4W;kOPˌeIz`5ݑnqZ9_34IpNɟH1e_88a?UvOdn:{ k^t0‚Xg\ME*<ˀNSu#mFcWė؄CdyJU5p߻^rC37ΛzjS"}qEVp6P#=<7f2 ˒psɦzI!<ی̓95'WVb:nR{KyIbXUm-YI?ʆ俙QwhOFHx}}5uWfIcIK&tQ#!F_ƞ!&UuT9Q.9̢D7yUNEg_j |Z73]ǀ;T{N.hh~Y]<.xA4yW39${YwM=_4yW3J9#^]<F:oѨ裒=K'7ՙ (j98U+\T'إQ崟ѥYgsB5QIw%i'C@4tQE>Hi.22K =Dgz}* @G.E=H% 3ܱ)i\ jJAVr I˹c4Ǐ~n )?Q^MXwRZ]/vD&%K<޽voy PH|_&y$~Bʹ;Seu-:\ubW1](o ƧW9y=֛%<~Syg> %N77׍Ib֫]X^Kֱ]7:b麜^`ykZ´j=1ʞ4h6BYb`L]QqM/7`G p Y;Op2j^U2yoI +饞am74SA:^}t֗ZˌoYp`b(Y†ߦS(W^_ys^~xQX6 bT'Œ&@#_y}sE{k/%ƫ1daW">'Q?Ih;Y%?G5]Q1W? H$_~zfxM{#9'Œ2:+}i-=?M? _y}ҾoRϩsMW|2Oqڙq?eGok}sG5||Tsj(o }KUa|?W|׽>g.QK Ï?RX0p/9{#innw; ?kSowL9v y\qS|+#׿ HR*FAoU,Q>r4ϟςu-ge’>/dLM%_?FkP>1M>x&`K\yv ӷ]7羥W.~ 2)QMA=, 7<+P>‰RU3(?4< _y}sG5v| u2~<]?,>~5_&?G5b.4-=/M_??Wxe&&wVY oo-VA!(== e&SkF)3p-|VԑLc&BrK)e twAfE) cy)XV KtٶiOLcך5,~M@q8z֥hVzm$k<>+8vXl.u2GpT|0V q@kwCI,P4A2LpH=oH-%D|ygGMan[N- 3p>=8\y!Byu8/ cJ@ْybwHP pHҴO dtɻ ^zcNV7n^%!52A*i83F^W9sm]d42rwdg[5/F'*gdr}i[+ ۡ-IkjKV #.#Hh7^]BD\-Ė@&Q)Q&&q &6?>MzAug$tNC }ק#ޢ]>t#ipv1T nsRzx"$:2 +3+q8u=m#$K1GO=k^.?hJ >lI-,pF*߰06cj{Zt*@i2'Qz44Vb F$# g:QM*3qZ&"G:%IDgIF9z=$VjfpvS3$Fr0)-O!YqVo9tdK׮m6c˂GL|f|I,/{u﷯N}u$Q6{88$~f4dԇTd/L %QTM8yda}A_Ȭv F{PtF u\}(.HS{VYf 8I'Tzb;+A~TMk⦘Dx!Ȩ6'C]gOujFhʺlSju?0$;:khzrp~Yeb1bEw z !;P+Eqj NuTn6=E{J'C4M$&P$Uk+Ki7@\Ϝ !T-Δ)rEu$]}lY$@5T[dkcX2w`)'\%Oup' 1b6 q)gdYsA^~];}0w=5HmĵZ%LL3ddHqzMmEj!R\Iz* |Gi0>]́xq>vvC:]xqJ 9]ޘ昬I>~?ʳ5(nax$ H+ִ߆L*uKɌ?jT ˵');lUV)@7 Ԃztڛ|T50ϗ csW(`yuXQK@*b '⳶ /͈8p}qI˝JDj-Q{/xA* 2l]3,[##sօ0QzbÒ`l2,Znp#pOM4aaYǔIM 둂89c _r25N<l6m"FgJ=fm;v-REUB^][>$y#f М{֖J3[I{elArt).J.9#9OL._s<|,Å=}G$H##8ZVdRdqp+d &HJ08?Z_?m\,UnJsܞ?闫5pR!\=Ƿ|Vj;ho x.#D27F9M'CѮfH&cr`=OjEܡbJACc${eXi4 8J秧Җ=FR.&6(l`qҀ3tc!&r$ N9> Mef[ Ll}$}:P"F]UXWP-_Vnnn!xL XsZ3X,Xzg>7ø`wo][_"&E;1|pkQ"0Bm;ˈ KkZ{k[gH $^ m_)hJ+)B:Tt{kGlWK@YU2#J1ۆq>Oh@cG6zo!q`6A\q:l\ &9O1'^6COAׯ&3u-,İ|1F㚌k!` 0F/A$o%ɅD%(Α{s}le6o`#$ǠXI,fh3s늤H =y)w,<{X9 ",VXFA yhzqo2 f.ޛ5$Х`,`csZ_f4}4sTVWD_?ѠMq8ʌq) m) 2B"Yh2H3@wcI.gfwiZ\KdUfm7 #nLk`AiÚJ\i5 H0K `K`A#?5"[ݗ1nps4]>W+(ޢjq,r43clVL{*iR,J1J@qwBHѣTi3|=ZؖKIMhՐ*=X4+K&(H<8jΝiz!grHۡio 2Xm tbrM$l.Ra?1D8?7#jwސb.Gis#YP#<1=2y|%cv5ķRtU tk!%&O֏Kk0뱂#F$8A֝5#ŋ] n`98ǯހ4My?Z]?VF-Д9CN{L#3e;{8 e?Z̓vO!v7!xޞ~8c3WG۷NSN$AxVdg?7#_zxBAަBIvqYս-U9 ? mŎ,^Fey\I=6S40>7hޏ4KSy?Z>7QR֏Mj&hئ~}_GH Rޏ\is E!BA95FEsZ,KenN/P꟭W]GtnWc.7߽޵ _c~N|`L A[4P;cۈAU.NH3֥|4T5JG!@$HY??ZIkwlnXԢ9}3Gf'{sջ =:qN2O$cVGRO֫OCsqBE-rNk^aD \#EX"Bj( 4__䵑[7ת!OLJ÷KB9y_YfpcO$tfPp  a \﹍ ;U$[ME$h# 6lΪN\9F8G?=z%oP{Nhx%ڹLujFg(<$~ef4KIöwʾ[hlâ 54!pQE7U1eݮƇ9E;֕]Jx S2۱  8yZZ5ݬIfbg\<'Quʡ@@)q@xKj prz{^:Үj:gNu@8#Wg(m{Lܭos@Rvp -ֿwERT "B@X$c#k(,aICKnP8qׯMA#'Ya, |fpxt 7g,x9]oywL%]~^ Cޝ >hN*>9~UU_*#x?twKgoIM-r9;u#ԏʓzWǺjZ[P w ㏗xҟjO,iÝޞ{O/K}Hl '9r VH̉c @\9 `\3|:Mb? yma }p}Z]ގ_Z<> jJ#/N0:jeJR '?-}/˺y(Wָ/O_+6:Xvl;s靽j_4[B~?9gե}|WָCeeNyjlqp*Kjz槨 ZgޣOSyGE3OQ槨@ Sy}5?GE3OQ槨@ S֏5?OSSy<@ SyOSSyGE3OQ槨@ SyO槨OSy<(jz5?O槨OS RMA.Ee|$@:0p=+X8AqPqzP7? E\Q.u8КƒHA*[3` \iەëNkwe$1H!zWz5r#8'7!{mr ZVK{rʱ;wxf+QMPz_sH#Ԥw?.0F:`BkmWGX]jh D-KDbق۟uXо&5~a&CH@wx=?']|1O)$+H`Bwe#NxQN.zDRxjѠ\914u+ U@=9k[Wkvq GG+ʞ&.>K=uWUddæFN9>j6:κb-$$d )? k_ Mq=Ƶs\n[*Ъn⭎y^4{O O5۞VhkI~1qz޿S ֣s} RFS!&{/;Ew=ڢ7Y$,izE\iuz>GTȻa70}sX,;/#F @]W#ڜCV`Ew<c)5I-9BT`:27p~@{k&5h ;/rF&ݯ }E1 dYX,?1^8ѾEM5_H8"گcmZ~dW c޴x{k/W96ZG+G!o1%䑎1VVy%gER@w,poLM<A&JYFѧ' #Ǧz|]Ƒt =/ hxϷjjkLp x;=ҵ3sosr- {t<2*9l.TںƙIY9s43' |N=vb@E Xdr=>c$Zn EGG$=;nzmMQgědeTٿ<Ȯ^>y#ӭpxWXch7+n&&#Jm<2W灞J:xn#Y y ]$^!x%T==1rZڬ7. G$+, ?6Ak8MVK[Dvf,ಌ/=Z-Tb6f'a2O5TPk/N]J!z.[wR:FW84NrRN;7n eVT\dN{Uk{O>4ۿSqZ^ym<'NveTaFG U1gF1ܣ:|t$PM.imZyw!*T[I*DZ*?ɞN0z3M#L|QEy@WTUʶ_f_/4ٖ'ךcK]2ca<;3 pEjoԢйO6Rc T C%G[vi 1xL /ռQI/%#7F7\Oi:eY}e!PK0:;mƔ\"i3z*2UټwC9 AP>9J\R0}w$Ƕ(9OM)&=# Nq$8nWl*k; eԴ8B n\vd9qRxKEo8Baیl =qe7J;.u/&GHF˒9 =4WRQvJx*!~P\5ď]RJcqT8"Br>Q8PQ\c7I,5H#)ʅv)Ei.ȉbȀI&:1 4i~0{M=SV p6#i73+@n f{m$yW+ז)ehVcE, HJcw9b; .s\jhwp-0Da1* >ŰK5T36hUSpB*>SIn{;Vf48uN8]V'p;@}&k69- h- >|Nhx|sOɐ6=r(4i7?Pd8iJ3npJH'kԌCKGL] 9'9vZi>3ӵXP{Z% TF?('/--^$Nzps#z]i6CMF4"Em^NB\R.jʩN+۷ٳA՛7@k#%*9(WhA#'g#+<^F d#CI1@e5R1F<<3ǦӜ:_m]r2WJG|g`)!t߈ f/[Dy#s3뚅1,]Nh&yϜ] 0PG@9@lNk46:}xʐ6 `SQfp+¨'~J܃(N"[ QKV@}00%N1)D[4?yvӦ|{uwW%cm~ H%ȱBFI+#~r[CRqЊ%HTFݸA-Vgk9w6QK(//_Ue Ί^_..M P_81L^FA/&[p''d G,?}}Q΃{KōwPl*Hf$?v_[Rk\9-"0 ¸Nqaj )_Q΃{Ev-$uq5uiK&+9m}7_UeG:A7{MfR}b[#Ӗ% *M ֋{e?İSH#8Sא:SaI@/*X2j+éɹZxI_ѲHsTR3wS$5+**y9j8Fo$?4E5M:5*g)&EJY_3n|.LE;8lMK \'QLǀeէi&//nA'9qU!g0R^,{7_wtP o#W)5vr9_7V$ a\x=k15K/&w|I=?RkdQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEZzU#7P1O E\QO E\Bj(máA-E'PXS J, IU3#*eeA T@c)ҨTJURbfbZx;-ϗm6UQHxKd-T]eXe=1ڵGo8?Go8x Ie+$W<|ۻtǥYJlI,.z?<{?MEDWh=?bxMe[${h֯ix9б-M0q'svF?9Kt׳A!??3")g$p %#I9sTz杧5wO-4PɆ O=KvGo8O!??2 C_,Vrb/?S-T^jtdDUPb~\?;Q?;SXG١{ʵoZ|w9ͷo=:vfl!>AAc#yZEE5H=?eþ pa;Ί5n`x{EV~yFpɰ!H@nϭm_ķP2kWX1z ut&Ȝ`+J!G2sa㥠}vf!vIq \Ӿ!Qԭw`(;(9k?-͓0v f1r1ԀMҙ=)b! emHTr{Ey|o{ukq&h P݌=IV(Ρ@(pO!xRzZ*(ӼsG^DW( +gn9yk]&qmol֠PJLI叠x]mfxȿY]FQ;ڻGm^լj[fTHJwy ({Ois e!t%Gͻh+ɥ폊_m5I` ;lۨ.(έov62[A[I3OL$Il率#*ݾȊA|$Ҳ7p}Pxr-zgl}:{t "7a(,8=H+Ш~6PĖ~e"R1/L 9=qM}iY[&xә6P6H=x8Ί-Y _A$r$1|I$`dxK -̄GR@zxٴ&%X{22df!mW,3~lv+Ш6zE#7,# *#S$ζ$5qMn촒0n;W_i>5k,ߤ̲庮vr 7 Ā8i?α WBPHRAX>5*9iC@ (ܻ!O*' Vxwa`onv|WkEpcV/mܳe c+# sSHtXk6S;\qqΊ 52eHe cׁJұԅN 1*[WeEyq/-I7NxH}xZf\R`˟`qZ(vK2LC bzG6k_E;um$+fʈOر3#vƃȠ4  &^%ܶ9mx8/I5[ebHc`pI`qW_p(hJ,&Ŧ)6nyJ?7g Ɵ/PSqY`uSIe{*4Q@hLKE%PQKE(((((((((((((((((((((((AMZTBКa Οcw-Յ)dU0`yT6)*ZŵyoFu$cjY]xK61Kl 1,%c8^HeV*U'8B?Tka/ws_ZOإͳ d,wFx gM\ŧXܛ+ΆK, F?1%jܚZ2i Ї21tqQcHZf60Tu<}iGM'M߫+Rm#&nBɄ@uTg^ONgA>iAf e; &;TƮ4;H>#<ki+Kl2'd:n|jk%4l#"KZeA<5"ηE8 >Ljk-3:NҮnT]9'9{ވVݹA & YʅQH$'>6W,;Pb~m0"암 ~޵֟zMM89pp'= &@u 0upzR6p`yl^EWnmz|['3̲! 8ۂCd8kŢFݹ8Q AZ煶P9On nie-mk{+GyͻbqyOZ땷 Ӽ;Sy:mJo 2;ִb*՗EVc ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ?7@)o@ύ?)p_ Ɵ/PQdxtER𦟨:3Hn/(㿭]43Npԭn.a;آaqހ1 A<ӯdv1i;osRit$IY# ǐAO9WBEFh\71Noܸ42wԅP}%σ-;^ǰYB^3+dj/8\b7Ϧi-;KĖPLޙ+LV-帛E+js1'M2i&P1+d]FcI< A>BnVѮa 2#.@W{id)}pKWL#ch`z󼟭tsJF^FTQԱV4EHi#+&6{U?vC$% 'v$}J~E" Z((((((((((((((((((((((((7jP o3O E\Bj(" 5:Ux\3Z)n-不_kg+ύn0w2{4ī7<+Ǧ@)_0]6( 1F#ڒ?x%IewNAV$e+/]x[ɲ_(*,> ܀ z=gm4=T6@qAps(+3N[V*Yo`ɕHXs*J|9vNf^H+Z·P]M|>|.,vQR s?"-kicʧ`i>^3c߅|Og͎-ТHrJ>` GvA(o)sI1fQ,p@ϹC⫛y%Kr$$ m.EgUsUAlKSI441eR7r34N0H3&NA2NỒGn1]քncH/#uTf.\Hv'3\M/T9VI#Vn8}վk: I[0ѱO0yrTuwouH ۍnD8mrюH/Z^] l0H$\g8q;:)ȥ(((((((((((((((((((((((7jAMZ|i!HME4_&:}3*QOEs_568%dD!22zs;GJ4.?Tc R< K$}@-=2{I G].q׶cofd}6C!|h ?v$#wL`MuZZۀd`VޫZgM[T;X(T68Hd@ mm`>n~ʸ`#{UtBo<)9-x˖bZ|]^s=jԚUѴrZ[>7+F8鑎q@\>'֖s$VK22儛)_Jw%ڴ^,Fu u)iJלpsO8KxSyg;# Q7 J` i2lWyk}2E*ֶpcvk(7у&%ŤOZD.S3s]Ο+\*\9)L H v :v1#UUT : xQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEU[֯A}8o7oLP_)p_ ƧpQ@ӼkX['3z?٫?oƊ(?#4uPEoƏN7cEt?:FhN7cG'_P Fh?#4Q@'??#4Q@'GoƊ(?#4t(oƏN(@ FhN?:?P Fh?#4Q@'GoƊ(@EoƏN7cEt?:?P C7cG'G?:?oƊ(?#4r(oƏN(@ FhN7cG'G?9Fh?:?oƊ(?#4t(oƏN(@ FhN7cG'G?:??#4Q@'?!?P9?-rBfQE endstream endobj 13 0 obj << /Type /Page /Parent 3 0 R /Annots [ 16 0 R 18 0 R 20 0 R 22 0 R ] /Contents 14 0 R >> endobj 14 0 obj << /Length 3695 >> stream 0.153 0.153 0.153 rg 0.773 0.773 0.773 RG 0.702 0.800 0.816 rg 34.016 34.016 543.969 723.969 re f 1.000 1.000 1.000 rg 45.266 210.682 521.469 547.302 re f 0.773 0.773 0.773 rg 45.266 210.682 m 566.734 210.682 l 565.984 211.432 l 46.016 211.432 l f 566.734 757.984 m 566.734 210.682 l 565.984 211.432 l 565.984 757.984 l f 45.266 757.984 m 45.266 210.682 l 46.016 211.432 l 46.016 757.984 l f 61.016 226.432 m 550.984 226.432 l 550.984 227.182 l 61.016 227.182 l f q 375.000 0 0 260.250 61.016 497.734 cm /I2 Do Q 0.153 0.153 0.153 rg BT 61.016 479.943 Td /F4 9.0 Tf [(It is imperative that you )] TJ ET BT 156.056 479.943 Td /F1 9.0 Tf [(do not click on the link)] TJ ET 0.153 0.153 0.153 RG 0.18 w 0 J [ ] 0 d 156.056 478.514 m 253.580 478.514 l S BT 253.580 479.943 Td /F4 9.0 Tf [( in the mail, and do not provide the scammers with your username and )] TJ ET BT 61.016 468.954 Td /F4 9.0 Tf [(password as they might be able to access the universitys systems that are accessible through the Single Sign-On page.)] TJ ET BT 61.016 448.965 Td /F4 9.0 Tf [(Last year scammers were able to forge the e-HR login page through a phishing scam and several staff members had their )] TJ ET BT 61.016 437.976 Td /F4 9.0 Tf [(bank accounts details and other personal details exposed to the scammers. In the light of the issues that Tygerberg staff )] TJ ET BT 61.016 426.987 Td /F4 9.0 Tf [(have been having with general network access earlier this month, and this weeks issue with e-mail, the arrival of this sort )] TJ ET BT 61.016 415.998 Td /F4 9.0 Tf [(of mail at this time can fool some people into thinking that it is legitimate and lead to compromised network and e-mail )] TJ ET BT 61.016 405.009 Td /F4 9.0 Tf [(accounts.)] TJ ET BT 61.016 385.020 Td /F4 9.0 Tf [(Heres how to report any phishing or spam mail:)] TJ ET BT 61.016 365.031 Td /F4 9.0 Tf [(Send the spam/phishing mail to)] TJ ET 0.373 0.169 0.255 rg BT 189.077 365.031 Td /F4 9.0 Tf [(help@sun.ac.za)] TJ ET 0.373 0.169 0.255 RG 0.18 w 0 J [ ] 0 d 189.077 363.880 m 253.742 363.880 l S 0.153 0.153 0.153 rg BT 253.742 365.031 Td /F4 9.0 Tf [( and)] TJ ET 0.373 0.169 0.255 rg BT 273.758 365.031 Td /F4 9.0 Tf [(sysadm@sun.ac.za.)] TJ ET 0.18 w 0 J [ ] 0 d 273.758 363.880 m 354.920 363.880 l S 0.153 0.153 0.153 rg BT 61.016 345.042 Td /F4 9.0 Tf [(Attach the phishing or suspicious mail on to the message if possible.)] TJ ET BT 61.016 334.053 Td /F4 9.0 Tf [(1. Start up a new mail addressed to )] TJ ET 0.373 0.169 0.255 rg BT 205.088 334.053 Td /F4 9.0 Tf [(sysadm@sun.ac.za)] TJ ET 0.18 w 0 J [ ] 0 d 205.088 332.902 m 283.748 332.902 l S 0.153 0.153 0.153 rg BT 283.748 334.053 Td /F4 9.0 Tf [( \(CC: )] TJ ET 0.373 0.169 0.255 rg BT 307.247 334.053 Td /F4 9.0 Tf [(help@sun.ac.za)] TJ ET 0.18 w 0 J [ ] 0 d 307.247 332.902 m 371.912 332.902 l S 0.153 0.153 0.153 rg BT 371.912 334.053 Td /F4 9.0 Tf [(\))] TJ ET BT 61.016 323.064 Td /F4 9.0 Tf [(2. Use the Title SPAM \(without quotes\) in the Subject.)] TJ ET BT 61.016 312.075 Td /F4 9.0 Tf [(3. With this New Mail window open, drag the suspicious spam/phishing mail from your Inbox into the New Mail Window. It )] TJ ET BT 61.016 301.086 Td /F4 9.0 Tf [(will attach the mail as an enclosure and a small icon with a light yellow envelope will appear in the attachments section of )] TJ ET BT 61.016 290.097 Td /F4 9.0 Tf [(the New Mail.)] TJ ET BT 61.016 279.108 Td /F4 9.0 Tf [(4. Send the mail.)] TJ ET BT 402.934 259.119 Td /F4 9.0 Tf [([Information supplied by David Wiles])] TJ ET 0.400 0.400 0.400 rg BT 61.016 240.630 Td /F2 9.0 Tf [(Posted in:E-mail,Security | Tagged:Phishing,Report Phishing | With 0 comments)] TJ ET endstream endobj 15 0 obj << /Type /XObject /Subtype /Image /Width 500 /Height 347 /ColorSpace /DeviceRGB /Filter /DCTDecode /BitsPerComponent 8 /Length 24399>> stream JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82 C    !'"#%%%),($+!$%$C   $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$[" }!1AQa"q2#BR$3br %&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz w!1AQaq"2B #3Rbr $4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz ?׎4("}{SX,m'$xսm帎K(n\GzW>ۛ屑4vj?i}gi(l.I Y$t[M|bKU<̈zGSXνW͹&t_nӿZ_k}-rh>ty\a%3qԎ?ƫi5NH]s/e/Ge;~-北wZk\kXMKc^5TOQGE:XoyQqO[oyQq?OI>f7ʏ|<ȧQw*?'(~B(T_QG;9c|ȣʏ|w>sNaT_QGE;J9aT_QGE;J9f7ʏ|<ȧsG>X,7ʏ|<sG>X,7ʏ|<ȧsG>X,7ʏ <ȧsG>X,QqG}(ҋQqG}(ҋQqG}(ҋQq?G}(ҋQq?G}(ҋQq?G}(ҋQq?G}(ҋQqG}(ҋ"ĞR/Ž-^3#hSҌڕ!/3h$%Hƫvn0XFB'vIqW҆9F=!lTAIwei078h2ysnJkhbF>ΙE=Gz5qhV3rW|A6d]S"jݜ p㎙޿k~,]XʼQ[S]wV3]Y߱'v)r鞵I>gi%-.dl, c#:] .c 'ҥf#)}U;}R7{vY6p8sd㞕Y+BrѝZ ˨/P s>ijij߲ ?e?߆ 9p_c O ? M ou ?ϸ}b1Z'Z&7캇GuŽg>W-_~B-_~B]Czo캇G3XwAI!GAI!M.@C7Q]CzoTf;KWߐKWߐP^~(.@C7Q*3RoQRoS~˨+P }P^~(}?)7()?)e?߆ >˨/P s>ijij߲ ?e?߆ 9p_c O ? O ou ?ϸ}b1Z&Z'7캇GuŽg>W-_B-_B]Czo캇G3XwAI!S˯޳-̥Acz`uW4[LwhVKge`Aǯh}?ޱo'u  GHF.$9K$-sJlv,Q!/@Jܹ${ϸ}b3gLyhXMbxDtee`h&j; ;QנbiG]kϘ^}:L3RsF)(@%V QXH(e:8FPvj[! KM4zQIE;`RfJԔQ`b41F*-,瀣Wоe.>Ed.RT j++B| )*֥ϔ/@VI?/K Z++B|>>RTEeh_ϔU&iRp (Zb ---6h--74n@ E&E&I2hhRfIE-4phɠ4xuO}ZOsQkQ]ci| ߃{@wܚ3ƗMjNq٥32hfFM?4ܚ2h٢G43Mɣ&)4s@.i4s@4hɠfo4dI)4dl?>۹ڄnZx_ ?s?V8R}F^yrR\Bľr  Wn;HdvN6 #!T0P~Tpr} )CJ'{ VAmj7>r־t/}ц:B.SnO\ ̼K+-# f>NYWu$eqf.v>6pz_NX+|5BjS劒ٜEњo4d&72hh79撛4њnM;479|A!GѭE _s֢i%w iG]9l_.h'jLFivh74sFi &h٣43Mf$"R:TK{jn`f=hȨn.8c^#5 ߣ=®K4Rve̊3Q*J$n2 cSBsFh٤'J(+\Ǵ3lRF6w_ VqJіi ( ?mͶ>i0QЉ( Ϙ.Hfdڊ\O$N8?+ Fw` 6aFifLfsK@ 3MfRPFi ;4gJJ_<Sj??j+;[K^|!?#݊hwkϚ^QI 4M(4M% \sJhG)MC >s\O*h! 8λoȩ1 ? j᳚X( FFȧ[跶-> o?Nԭ#~X+;/篨o? {aV;B e\qza{[Ēxj37-I̒t% #iGǟxbth221rT1GҦdw"'Cb OK){W0;;c=9qwqISsFhOi3 6kC/\ld a&E >ns4A/Kd#gҩfXΒ|ϽHUmX}:4Y<ȕY_LsVH.<}+Z(F:bG=kY(d^j&\ϓG+2.dQo(U7Z9Xs3FjڮɿW?ha̋WRʝot;ceNz6Ϳ NM,[R?j9bILHywy/|TOt10ĭxA\ _ƽs&Ŏ;%?*~xO_N]4+]FQ"q/^w\?J_(\L8x<`^=vW[uhf8wؽNC,m;L"'s*4J cm<;gx3,M;V>JWĝYNt袱;eW=rӯA[M޿Kg0> jzH99 "1QVFͷ:i3&ip4) &hZ3M-Ps@ 2))3@='}ZOsPkQ]_=+i%wy'/i%w9:>giz&i58њnh;?J\3Fh٣4њ~i3MgFi4s ߂x3xU9mV/ D.Au`gjb +tMKQf[{#+JY#bṉMjG춎@a@$`[Lֻ@a/|tʱG)֧m8cKom,vjׅ.tK.Hh$ip:~ -\7h^ݽd7 5fPo.i3Y;Ҍ)4vh'nhS3+b_/ƱYom@3Vw.4x AŭL?mi>lȪЅtf {}Mzv1WˋŅJ-K@|??R}x|OF=c|??S~ohͧLh/>ScrcqZ٨/l⿉bvuqAȠVdѦ9ޡ"@*1 ,%_v@ҤIyD#Fۓ8#MChH'i\qON5Z߭Hu;K-Nx?Ҁ7Hl% !UfFw>;E4}lBi=^ᕅkA,NFb3zJ3@Fi4њnh?4Fi4њnh;&fh|sPkQF!CѭEw-/C>Ws\/SJ3\>&|/E74nqSsFhSsFhSsFhSsFhSsKk,ybu4߻$)Z_RC}p-_aԊ/IP̊m#gdd헅!\FUT{?jtQ9@D`@'p}PiG=9mc7O{B[\yՒ{!tSsFhO*e~Xz+p^m\PY,җ' S|F7jp6z\5[zٳ5{"z8ϯ iSr7+sҮ[C-e9nrOzf!Y|\ڀ-QQ}f@QQ}f@QQ}f@ Džs5$*YFTzx\3@o{-ZzqG_Z:nis@ A!A$7#ּM{N ~#dVWqUiSUQP'Sm†c3_!ՊA\:υxOGʲh{k#ӵop$r|w.E|x\Y˯Zz Ԃ;m{Oݐ`>uE`%O_sutSsFh)4)4)4)4)4)J^ޡ_s֢^֡_s֢Ծz?o^J+NHoi%v>Sg/QQ7&㨦џzwSr}hQMϽqGѓ@5{se*U14 z㊿zyw-݆7#p1?€&]F 17;I vZ{dDa8 vGLb"| ңv(H_?){?$^L،Ó«>RrRAyQq]ѹjP3t\ ^ 8|duLP!|19ۆt-ncRwqMɣ'֋)4d`SwZ2hqM'֝wFJx!CѭE&u5}u/z@?RWn+Rq^zI]kϙ^%58M&h&њ\I3@)4f ZLњ? _ß֓4,-(4f4=(4X8Xg+t=0>&V n&x,Wzo|}'X&b9?Âp}kxy'V $]άNI/a|g~y)Ic'~9a^2ES</kw<- uriJNL()i`QEQEU]O5 NvLj N%97zy[܁Fk_tE׈DW k)+港L%O34Ei3FjqyLњ^h4f9i3FhyLњ^h4f9i3FhyLњ^hiӒu`iXlx{߶if(!RBa>lCH+ێ=1GN}ƀ9Խ~m+XTz7l֤P~$*"%['s[fbKXos_kbl&02O'AQC_u38\g׊AJ`pmsj쌠@]H#׊gY.a1I 5obJ!B nR)jMq\UST`,n2@@?JVsV3Li3FhyLњ^hɤi3FhyLњ^h4f9i3FhyLњ^h4fi3Fh5 5\XkQ]c| $׿?RWh+[ {)+rT8KqA.ii474f3I7P4m8IgOEY͟?Gl?ٳ͟?E(5g6X?ٳJ*lj?gOE*l͟?Eړ5g6X?A4Op=VJCU M/Vb}8ڬf꟟Zo_΍/Z?ٳ͟?@o_΍/Z?ٳ͟?@o_΍/Z?ٳ͟?@o_΍/Z?ٳ͟?@o_΍/Z?ٳ͟?@o_ΚMq<(9A\qI]9/=}g޹*|l_8Mԙ58OJn~gހ43@'3FhWL??dSVDwRifϳ*5mE4hvڎG'46u6Y ˅?"عoAsw +VTSBHf|rA# # Yև;f]Z|A4:omo&6f1Fwq-$Eni ؈#0x]gn(^mIw3Hmh0x5hdծ2F0ˏ`g;((CSZ5?Ҁ+?ifi\'ȍZgS#&v}*PJ 7Yi\ged~ʝQ[~)dO<6jx[ eY>JKZNIioY-y|IY%1͌2[.㚞M?W($)!hV^EלxTѵ^9<3?7^8GZKwGK}>6Wf2߹ Mɕ'?'~2j֥.X^9W眡kX7R,%#M;8'G9#;N1]Ntuvcn/nمsӶ+#ݢ(((iiҀ0wp(5O Ͻ3@ PsMϽPn}}OZMoB?j+l}u/z)+1M|؊3qƗf4Ti:Q@ )(lj Qc`T}0\uPFE+]BwH2ÒzW&jiPNywLQd><̓r;` M(eu`FArwI(ܶAssߚl~Ӗqr`8zRq!PΣq2zxR+ֹT݀c:uW*ĝqAܚ4OڥrR1\[S+Ju~OidtV|qYG?ΦԴ^m:c_yNy4זKI,k&mf>*A2\]b]*d(X\lVŝ"U`S!eOQ&3c4dK(HZGD EެGsƖG!UXj$r`rq(DxK'</V;o?WAʀH灒 '+p(}8G$B]E"+F]A=kkOO2P%~$]lԣ8;`ߜ#*88#zjNpګ PuԿ α?qmaZ,WR,iYh̐9I#V76vpXdt`YYOBZϿҭn4جne-f2$az]+c od@p_S4T2 ~y8kX%vbž]w4CvJڱU_F @S\"N3(?gҘ)%q`98zEHQA4H0|[h4yOZbBQ]YPO+,t}Gq BLyԜ <#e7(mC9SuMvuC*lJnWTgPv'q\}ׅ"\˵INr=Nj[=#Lk;Dt*n\`$7@9JvO~fhњL@ )(.hi(4giz3I84PQ@ 3IcTt?Ni6sy9RxVE_9=:qPťbH"=KyjTeIld*Ҹt-Bl6($4 0<Ĕ'w14&h/5ig(rE>+F4 dlVDR ӦG^wpc3. !$9'%I$(]@P@L(+;sMɓ,P?)~u2#|2dgoJ~>`q`R_w@Eau'MxO@ZxoHmZ];*3>JcUrI BO9SX I{{.fkr˜dM`ιs]WirA,Fn{VBnYDL$#!wrGڀYHVe="@ ISNOGRݨaPf[Zu;FP8(#lokcYtR>P/v)i!"VDb2N@' 4h/Ru2D<}Je喃q{=ڔ*ބ8v+Cֶ&l'7e?%⣼| qvt@<~2.t=7: *<[88~*1ruY+deU'1J>Ӛ86ѐa8l~MEt3[{[y1?@ֺVj,p#~1XC[pNc?@ZO 0}"u}Pہ)n38ie_4[q {ikAr%#?\qx> D3?ab&д6fDɿf!?޷%ZyI@v2/oV~lPG'k#GnT@'m+0Nڛ2*Ϛ5)m㽕c`c3{heeكv@+3*PHQq:|V8//\ee$G۽itha 'or ֯Zh6QC [bfT3}0t aow3C[ac ʗO4 ! ]ςҮIf=:t;Ĭ flz^jxOMƕy_#E%u>|5]} qƗ>gޓ48ѓMϽ4\ތRPMm-N |!';{})?6#W[ 9[]^\JUsƧ8!gAךP$Sc,{<F,йp{n**Op hI][G-79 9FO$𬐲Y0Cnb3r}'A=) cH;ҫR]*MMqX],mI$`v'qӿ:}hgPh)]Aǵ#X豥IJ_FyYJ,Jp1#z ![hTq\vOk FvUcK.q*S&ݯm!>Xs9'޳$|4d_VGi H 5m#]J\3/<2PXJ/za2 w|y5%tk#l4y<?sixs~t)z<PN= ޺Kk;{hc`vzg(ek'jVb@ ucRQNgUV&[w^v&Lrbb>*o Z'\A])mہ{gޮknuI-0(U`'a8}ð1$xL#%xqiO9-b~d'<#ڨ (jJp@$өҧ|>: T2VB!=9'[F u튭ܘ¾GO|Ph]o W:Ul7sg`mn-gU2g[h$vv_&,LDJwd}SDfWQ  WNcFvPgl&}. 1 9|j <9i3kGʖq)~*ޛh ݵαvP?LRK+'Q4.Oހ*O>Hi&9!l$g?-"8l- O*;w\ڳ<oyxM?$> \3tB308889Wp`Gj gk C _r'R=q`Վ(Jlp(EOBh7Ҁ9џzmvO'֒ތhdџzLPkQF![FږR5U|f kϙ^IHOA;4f(&4f4fi?ѿjU WZ@r7w$$ݍz=)ѥWU1aې8-s~t8Zd9tWLR7@0sp1ɠ }RKe~Xm {z;?M5ĒFcV#;UAI20.+2ö$1֤:v#̌wgH=z@O ia[hp>nN4- Ed-&$, zRdxf5wv6ul)aZD"JGTK)z>g<"WBf|sd2hҹS.㩭4 FB) &ld<4&dX J@\@3I~T$=֋%$ hU#4!Gym~/O#_Z\>Fhz>?S+[9ȾPz'ζOCXζJuâ5Ǩc07oʪ1g,rY ;Mz#" b62GAoγM5ivk$g[ qxK̒14] @\t?(yh}Ih(x0Xqjr|'hۈ$g@$@\.:gڥRYsX;rW}(MI![6poU=21VFwixAW2^zS4Kxy]6OS܌ּGo$E?( x?{Ŀ[[:/:gqZ'ŚPjHݖ vg'VEQd ?)FO U_hEUd@(rWh n'!j=2{vޖ?D-c?^i̾c@$3A#zր/y M A2T#6 $9un,d(#L?}kcT{k{,6DC4DGci*(t{>KnA[ Bq䎝Ef [*+xܻ@8 ox;Y-nn8= fGڣĚca1f7n]}1T3#>6ji3<[s&H$}kl!p\ =}THPd#.LqEkyobfqop{UZ6; Y`UDIu``w犵7/8VU'$*ק#T7OQLѠMĠQ>vH#nNrԹc|CuI<4U ʑO_Z=J[^*oKg,ٺH \7'U"W*@USC FN6+P3M=hFM4f)fO^4M%xƳ![FjkQ]c| ~.GJs\Ó)+Sg/Q٣43H(44Q@ j3M4PAcNm˪ /^s3Zn#Za;R Sry##mhuWd f-B?I\ԗ UV yx. ta!8\A8:CƠh~bWGf*7]oI3FC3pz`}h[ $S+ 2ws3W4U#TFv'5Rk\CF3שZ6o 8 r8ֺK@dk>!@ KuҪֱ?_4-Q^&[I$ltoր*si0F/#;,%S;fq*{ݕ>c~lUtI']BFK_$m\> Vy<*^@Qv5ŏFld?i Gp0,z~y0v7!;H:8ʰ<U%IcG_W ~1ZtC5P'"#ƊWw{ f~ Aw;ItT'8V\cԴ}QO$N B ohcK!W3$ s0Xxn+_\0lB8犞=+D .\2yfcq@=X?Ng!ˍ7p?[eGb񸐂 4xPZ$K'+>ntA5,Hi\+`ެtvgO:rkuxX KO ZY܋p29=tYm$sx uޡ{ 0*dp0NxhҵrJ$L0F?|j:&n6 0Tz~{]A(Qb\yRZLc$ZP8e[eUvऎ' Xs { ,]W@ VK(:UH}Z3,$o<'u4Q`6"_7 }V5mDOHx/Xf "_sJh?_H88UxMV=+CQӚP:ح BcVm*.0SosUJPԶU袹kR?#ct' }+ 첢9V$33tH5 twc{X_$O<UɝN+I~1{}[3bCN[v3CXTF~T7T:y*n-X8){& :oHx/Uyo"׿9s_H>$#3sMP]8 ohNhfh%Yr+Px@9s뺹[NΑ7rǾ)RvirrzS2'D#_;:͝g5qͯHx/I )Xg7 }RDbh?_Hx/Xf ϺT_걹 "ƨHsY,F}fZ3MFiz3Mn>gޛ(5_ 5yԮCc|t׍yE~Q?Gp{(GG_μkd/?( >Cc7 5ƶG<c(d?=ȇ޿_μod/?( >Cc|tyƶG<c(d?=ȧ_^7?F_W}!1j}:MG<c(d?=HS׍lyE~Q?Gqd?=z}:Q"_μkd/?( >!1j}:MG<c(d?=HO^5?F_W}!1ƶG<c(d?=ȇ޿_μod/?( >Cc|tu[#Q߱lyE~Qw?ɽ/_μkd/?( >!1D?ƿ׍yE~Q?Gqd?=OHdSk׍yE~Q?Gp{'_ΗO^5?F_W}!1b}:?:( 6G<c(eSo_/^7?F_W}!1kR.9hEQWj ++#ل9b endstream endobj 16 0 obj << /Type /Annot /Subtype /Link /A 17 0 R /Border [0 0 0] /H /I /Rect [ 189.0767 364.1986 253.7417 373.3561 ] >> endobj 17 0 obj << /Type /Action /S /URI /URI (mailto:help@sun.ac.za) >> endobj 18 0 obj << /Type /Annot /Subtype /Link /A 19 0 R /Border [0 0 0] /H /I /Rect [ 273.7577 364.1986 354.9197 373.3561 ] >> endobj 19 0 obj << /Type /Action /S /URI /URI (mailto:sysadm@sun.ac.za) >> endobj 20 0 obj << /Type /Annot /Subtype /Link /A 21 0 R /Border [0 0 0] /H /I /Rect [ 205.0877 333.2206 283.7477 342.3781 ] >> endobj 21 0 obj << /Type /Action /S /URI /URI (mailto:sysadm@sun.ac.za) >> endobj 22 0 obj << /Type /Annot /Subtype /Link /A 23 0 R /Border [0 0 0] /H /I /Rect [ 307.2467 333.2206 371.9117 342.3781 ] >> endobj 23 0 obj << /Type /Action /S /URI /URI (mailto:help@sun.ac.za) >> endobj xref 0 24 0000000000 65535 f 0000000008 00000 n 0000000073 00000 n 0000000119 00000 n 0000000350 00000 n 0000000387 00000 n 0000000525 00000 n 0000000588 00000 n 0000002951 00000 n 0000003063 00000 n 0000003178 00000 n 0000003298 00000 n 0000003406 00000 n 0000028638 00000 n 0000028743 00000 n 0000032491 00000 n 0000057059 00000 n 0000057187 00000 n 0000057260 00000 n 0000057388 00000 n 0000057463 00000 n 0000057591 00000 n 0000057666 00000 n 0000057794 00000 n trailer << /Size 24 /Root 1 0 R /Info 5 0 R >> startxref 57867 %%EOF report phishing « Informasietegnologie

  • Recent Posts

  • Categories

  • Archives

report phishing

Newer Entries »

Phishing mail using intimidation and threats

Friday, June 1st, 2018

There is no need to panic or be in anyway concerned for your personal safety about the latest batch of “phishing” emails that are going out with “death threats” or extortion regarding your “alleged” online activity around pornography sites etc.

A simple Google search using the following term “I Was Paid To Kill You scam” gave me 43 million results, all of the first 100 or so pages reporting this mail as a scam. A further search, narrowing the results down to only South Africa and only from last week, resulted in a little over 100 000 results, all of which were reporting as a hoax.

A similar scam first surfaced in the USA in 2006. An email from a would-be assassin was sent to a number of users from a Russian e-mail address. The “assassin” apparently appointed by a close acquaintance of his target, offers the victim the opportunity to buy him or herself a new lease on life by paying between $50,000 and $150,000.

If you receive mail like this, you should never panic. If you look at the extortion mail there are clues that reveal that the mail is a hoax:

  1. The subject line: “I Was Paid To Kill You”, “YOU SHOULD BE ASHAMED OF YOURSELF”, “YOUR PRIVACY HAS BEEN COMPROMISED”
    These are designed to cause anxiety, stress and panic.
  2. Time limits: “You have 48 Hours to pay…”
    How can the scammer know that you have received the mail and when you have read the mail and keep track of time to see if “48-hours” has passed?
  3. Engagement: “Contact me back via e-mail…”
    Never make contact with the scammers. This immediately alerts them that a “real person” read their mail and they will be able to concentrate their nefarious efforts on you.

If you ever receive emails like these, please report is to the Information Technology Cybersecurity Team using the following method:

Send the spam/phishing mail to help@sun.ac.za and sysadm@sun.ac.za.

Attach the phishing or suspicious mail on to the message if possible.
1. Start up a new mail addressed to sysadm@sun.ac.za (CC: help@sun.ac.za)
2. Use the Title “SPAM” (without quotes) in the Subject.
3. With this New Mail window open, drag the suspicious spam/phishing mail from your Inbox into the New Mail Window. It will attach the mail as an enclosure and a small icon with a light yellow envelope will appear in the attachments section of the New Mail.
4. Send the mail.

[Article by David Wiles]

Email

Tags: ,
Posted in E-mail, Security | Comments Off on Phishing mail using intimidation and threats

Phishing scam disguised as the university’s single-sign on page

Wednesday, May 16th, 2018

Due to the vigilance of an observant personnel member from the US Business School, we have encountered a dangerous phishing scam being sent from a compromised UNISA account.

The Subject is “Dear SUN E-mail User © Copyright 2018 Stellenbosch University” which should immediately raise eyebrows. The phishing email “warns” you about the pending expiration of your e-mail account and prompts you to click on a link to reactivate it.

See below what the mail looks like:

The danger is that the phishing scammers have perfectly forged the university’s SINGLE SIGN-ON page, that is used by students an personnel to access the portal pages, the my.sun.ac.za page, SUNLearn etc., as you can see below. Not many people will notice that the address is not a university address, neither is it secure.

It is imperative that you do not click on the link in the mail, and do not provide the scammers with your username and password as they might be able to access the university’s systems that are accessible through the Single Sign-On page.

Last year scammers were able to forge the e-HR login page through a phishing scam and several staff members had their bank accounts details and other personal details exposed to the scammers.  In the light of the issues that Tygerberg staff have been having with general network access earlier this month, and this week’s issue with e-mail, the arrival of this sort of mail at this time can fool some people into thinking that it is legitimate and lead to compromised network and e-mail accounts.

Here’s how to report any phishing or spam mail:

Send the spam/phishing mail to help@sun.ac.za and sysadm@sun.ac.za.

Attach the phishing or suspicious mail on to the message if possible.
1. Start up a new mail addressed to sysadm@sun.ac.za (CC: help@sun.ac.za)
2. Use the Title “SPAM” (without quotes) in the Subject.
3. With this New Mail window open, drag the suspicious spam/phishing mail from your Inbox into the New Mail Window. It will attach the mail as an enclosure and a small icon with a light yellow envelope will appear in the attachments section of the New Mail.
4. Send the mail.

[Information supplied by David Wiles]

Email

Tags: ,
Posted in E-mail, Security | Comments Off on Phishing scam disguised as the university’s single-sign on page

Phishing scam about reaching your mailbox storage limit

Tuesday, March 6th, 2018

Monday started with a phishing scam threatening to close your mailbox, and Monday is ending with another attack, using a similar intimidation tactic about your mailbox size.

The grammar and spelling is very poor on this one so it should be rather easy to spot. However the use of University branding and “STELLENBOSCH HELP DESK” might fool some people.

The Subject will be “We apologies” (sic)

Dear User,

You have reached the storage limit for your mailbox. Please visit the following link to complete your e-mail access restore.

Follow this link to complete the process: Click Restore

STELLENBOSCH HELP DESK

If you do click on the link (which does not go to a university website) …this webpage will appear. 

 

 

Many thanks to all of you who reported this.

Remember these 5 guidelines:

  1. Information Technology will never request sensitive information such as passwords.
  2. Phishing e-mails often appear as an important notice or urgent matter such as threats that your mailbox is over quota.
  3. Use of aggressive or intimidating language such as ‘immediately’ and threats of consequences of not verifying your account.
  4. Misspelled words and poor grammar that take away from the professional context of the e-mail. (this one is quite obvious)
  5. Use of an impersonal greeting. (Dear User)

If you have received mail that looks like this please immediately report it to the Information Technology Security Team using the following method:

Send the spam/phishing mail to help@sun.ac.za  and sysadm@sun.ac.za

 Attach the phishing or suspicious mail on to the message if possible. There is a good tutorial on how to do this at the following link (Which is safe) : http://stbsp01.stb.sun.ac.za/innov/it/it-help/Wiki%20Pages/Spam%20sysadmin%20Eng.aspx

  1. Start up a new mail addressed to sysadm@sun.ac.za (CC: help@sun.ac.za)
  2. Use the Title “SPAM” (without quotes) in the Subject.
  3. With this New Mail window open, drag the suspicious spam/phishing mail from your Inbox into the New Mail Window. It will attach the mail as an enclosure and a small icon with a light yellow envelope will appear in the attachments section of the New Mail.
  4. Send the mail.

IF YOU HAVE FALLEN FOR THE SCAM:

If you did click on the link of this phishing spam and unwittingly give the scammers your username, e-mail address and password you should immediately go to http://www.sun.ac.za/useradm and change the passwords on ALL your university accounts (making sure the new password is completely different, and is a strong password that will not be easily guessed.) as well as changing the passwords on your social media and private e-mail accounts (especially if you use the same passwords on these accounts.)

IT have set up a website page with useful information on how to report and combat phishing and spam. The address is:https://blogs.sun.ac.za/it/en/2017/11/reporting-spam-malware-and-phishing/

[Article by David Wiles]

 

Email

Tags: ,
Posted in E-mail, Security | Comments Off on Phishing scam about reaching your mailbox storage limit

Phishing with subject “Email Expired”

Thursday, February 1st, 2018

Several students and personnel have informed us of a “new” mail making its rounds on our campuses.

The sender is “Postmaster” with the subject of “Email Expired”. This phishing scam tells you that your e-mail account will shortly expire and uses scare tactics to convince you to “click” on a link to activate your email.

Information Technology will never send you this type of email, ask you to click on a link or provide your username or password. Do not respond to these emails or click on links.

If you have received mail that looks like this please immediately report it to the Information Technology Security Team using the following method:

Send the spam/phishing mail to the following addresses

help@sun.ac.za and sysadm@sun.ac.za.

Attach the phishing or suspicious mail on to the message if possible. There is a good tutorial on how to do this at the following link (Which is safe) : http://stbsp01.stb.sun.ac.za/innov/it/it-help/Wiki%20Pages/Spam%20sysadmin%20Eng.aspx

  1. Start up a new mail addressed to sysadm@sun.ac.za (CC: help@sun.ac.za)
  2. Use the Title “SPAM” (without quotes) in the Subject.
  3. With this New Mail window open, drag the suspicious spam/phishing mail from your Inbox into the New Mail Window. It will attach the mail as an enclosure and a small icon with a light yellow envelope will appear in the attachments section of the New Mail.
  4. Send the mail.

IF YOU HAVE FALLEN FOR THE SCAM:

If you did click on the link of this phishing spam and unwittingly give the scammers your username, e-mail address and password you should immediately go to http://www.sun.ac.za/useradm and change the passwords on ALL your university accounts (making sure the new password is completely different, and is a strong password that will not be easily guessed.) as well as changing the passwords on your social media and private e-mail accounts (especially if you use the same passwords on these accounts.)

IT has set up a website page with useful information on how to report and combat phishing and spam. The address is: https://blogs.sun.ac.za/it/en/2017/11/reporting-spam-malware-and-phishing/

 

[Article by David Wiles]

 

Email

Tags: ,
Posted in Security | Comments Off on Phishing with subject “Email Expired”

Newer Entries »
 

© 2013-2025 Disclaimer: The views and opinions expressed in this page are strictly those of the page author(s) and content contributor(s). The contents of this page have not been reviewed or approved by Stellenbosch University.