SEARCH

  • [:en]Recent Posts[:af]Onlangse bydraes

  • [:en]Categories[:af]Kategorieë

  • [:en]Archives[:af]Argiewe

Security

« Older Entries
Newer Entries »

[:en]Eduroam Visitor Access (eVA)[:af]Eduroam-toegang vir besoekers (eVA)[:]

Wednesday, November 6th, 2019

[:en]

eVA (eduroam Visitor Access) is a new service which enables higher education and research institute visitors to access the secure and trusted eduroam Wi-Fi network. As additional identity management tool, eVA is a platform where visitors who only need temporary internet access can be registered in a simple and secure manner. 

What is it? 

eVA provides a mechanism that allows authorised staff at eduroam participating institutions to sponsor a visitor and issue temporary credentials to that person for a defined period. Designated eVA admin can determine who is eligible to sponsor visitors, and how long those visitors may gain access.

How does it work?

If you are interested in using eVA to register your department’s visitors, please log a request on the ICT Partner Portal. To simplify matters, this could typically be the same contact person as for SUNid and only one person per department or division.

Note that your line manager has to approve your request before we can assign you rights. Approval can also be done on the ITC Partner Portal.

What are the benefits?

  •  No other, additional registration, for example SUNid, is necessary to use this service.
  • Ease of use. Manuals and instructions are available online.
  • Visitor rights can be managed and limited.
  • Access expires automatically after the selected set date.
  • Records can be tracked and audited.

More information on eVA.

[:af]

eVA (eduroam besoekerstoegang) is ’n nuwe diens wat besoekers aan hoër onderwys- en navorsingsinstellings in staat stel om toegang tot die veilige en sekure eduroam Wi-Fi netwerk te verkry. As addisionele identiteitsbestuurmiddel, is eVA ’n platform waar besoekers aan Universiteit Stellenbosch wat slegs tydelike internettoegang benodig op eenvoudige en veilige manier kan registreer. 

Wat is dit? 

eVA verskaf ’n meganisme wat gemagtigde personeel by eduroam-instellings toelaat om ’n besoeker te begunstig en tydelik regte aan toe te ken vir ’n spesifieke tydperk. Aangewese eVa-administrateurs kan bepaal wie geregtig is om besoekers te bestuur en hoe lank besoekers toegang kan kry. 

Hoe werk dit?

Indien jy eVA wil gebruik om jou departement se besoekers te registreer, teken asseblief ’n versoek aan op die ICT Partner Portal.  Om administrasie te vereenvoudig, kan die eVA kontakpersoon tipies dieselfde persoon wees wat SUNid ook hanteer en verkieslik ook slegs een persoon per departement of afdeling.

Neem net kennis dat jou lynbestuurder jou versoek moet goedkeur voordat jou regte toegeken kan word. Goedkeuring kan ook op die ICT Partner Portal gedoen word. 

Wat is die voordele?

  • Geen ander, addisionele registrasie, byvoorbeeld SUNid, is nodig om dié diens te gebruik nie.
  • Maklik om te gebruik. Handleidings en volledige instruksies is aanlyn beskikbaar. 
  • Besoekers se regte kan bestuur en beperk word.
  • Toegang verval outomaties na ’n verkose datum.
  • Rekords kan gehou en geoudit word.

Meer inligting oor eVA.

[:]

Email

Tags: , , ,
Posted in General, Internet, Security | Comments Off on [:en]Eduroam Visitor Access (eVA)[:af]Eduroam-toegang vir besoekers (eVA)[:]

[:en]Phishing from staff email[:af]Strikroof vanaf personeel e-pos[:]

Monday, October 14th, 2019

[:en]

An email with the subject “Purchase Order 98474” has been sent from a sun email address to staff and students. The email ask you to click on a link to open your purchase order information (also see image below)

This is not a legitimate email, but a phishing attempt from a compromised university account.

By clicking on links and providing your information, you give criminals access to your personal information and your accounts. If you think your account or device has been compromised or you notice suspicious activity:

Immediately change your password on www.sun.ac.za/password.

Contact the IT Service Desk by logging a request or calling 808 4367. 

[:af]

’n E-pos met die onderwerp “Purchase Order 98474” word tans aan personeel en studente versend vanaf ’n sun e-posadres. Die e-pos vra dat jy op ʼn skakel kliek om die details van jou bestelling te sien (sien voorbeeld onder)

Hierdie is nie ’n geldige e-pos nie, maar ’n strikroofpoging gestuur vanaf ʼn gekompromitteerde universiteit e-posrekening.

Deur op skakels in strikroof e-posse te kliek en jou inligting te verskaf, gee jy aan misdadigers toegang tot jou persoonlike inligting en rekeninge. Indien jy vermoed dat jou rekening of toestel gekompromitteer is of jy agterdogtige aktiwiteite oplet:

Verander dadelik jou wagwoord by www.sun.ac.za/password.

Kontak die IT Dienstoonbank deur ʼn versoek aan te meld of 808 4367 te skakel.

[:]

Email

Tags:
Posted in E-mail, Security | Comments Off on [:en]Phishing from staff email[:af]Strikroof vanaf personeel e-pos[:]

[:en]Phishing from staff email[:af]Phishing e-pos vanaf personeeladres[:]

Monday, August 26th, 2019

[:en]

Three separate emails with the subjects “Information Service”, “Online course” and “IT communication” from a compromised staff email address were sent to staff and students recently. The emails ask you to click on a link which will open an incident logged on the “Self Service Portal”, click on a link to complete a survey or activate two-factor authentication. One of these used Information Technology’s own branding to try and phish our staff and students.(also see images below)

None of these are legitimate emails, but phishing attempts from a compromised university account.

By clicking on links and providing your information, you give criminals access to your personal information and your accounts.

    • Immediately change your password on www.sun.ac.za/password.
    • Contact the IT Service Desk by logging a request or calling 808 4367.
    • More information is available on our blog and Twitter.

 

[:af]

Drie onderskeie e-posse met die onderwerpe “Information Service”, “Online course” en “IT Official Communication” is onlangs aan studente en personeel versend. Die e-pos vra dat jy op ʼn skakel kliek om ’n versoek te sien wat jy op die “Service Portal” aangemeld het, die ander om ’n opname te voltooi en die derde een om two-factor authentication te aktiveer. Laasgenoemde is ook uitgestuur met Informasietegnologie se eie grafika in `n poging om studente en personeel te oortuig dat dit amptelik is. (sien voorbeelde onder)

Hierdie is nie geldige e-posse nie, maar strikroof-pogings gestuur vanaf ʼn gekompromitteerde universiteit e-posrekening.

Deur op skakels in strikroof e-posse te kliek en jou inligting te verskaf, gee jy aan misdadigers toegang tot jou persoonlike inligting en rekeninge. Indien jy vermoed dat jou rekening of toestel gekompromitteer is of jy agterdogtige aktiwiteite oplet:

  • Verander dadelik jou wagwoord by www.sun.ac.za/password.
  • Kontak die IT Dienstoonbank deur ʼn versoek aan te meld of 808 4367 te skakel.
  • Meer inligting is beskikbaar op ons blog en Twitter.

 

[:]

Email

Posted in E-mail, Security | Comments Off on [:en]Phishing from staff email[:af]Phishing e-pos vanaf personeeladres[:]

[:en]Phishing scam sent from compromised GOV.ZA account[:]

Wednesday, July 17th, 2019

[:en]

Please be aware of the following phishing e-mail which is now starting to be sent to university accounts and might be thought to be legitimate especially if the department has dealings with the Gauteng Government.

The Subject of the mail is “Payment Notification” and asks its victims to click on a link to “VIEW PROOF OF PAYMENT”.

Firstly the link is not a gov.za website and government departments do not usually send out  e-mails asking you to click on unverified links.

 

The suspicious mail takes you to a site that asks you to download a file. This file has a encoded script (malware) that looks like an ordinary web page that asks you to enter your username,password and your cell number to “confirm” your details and “allow” you to view the encrypted PDF file. Of course this malware, now sitting on your PC sends your login details and password to another server overseas controlled by the scammers, which they will
then use to break into your account at the university in order to do all sorts of nasty things.

So please be very careful, especially in the light of the compromised university accounts that were used earlier this week to launch a phishing attack from within the university.

The university is now a very popular target for phishers because they can easily gain access to personnel and student accounts as the users are not often aware of the dangers of phishing and are not informed about how to spot them.

 

 You can report phishing scams and spam in two ways:​

 

1. By reporting it on the ICT Partner Portal.​​

2. By sending an email.​​

  • Start up a new mail addressed to csirt@sun.ac.za.​​
  • Use the Title “SPAM” (without quotes) in the Subject.​​
  • With this New Mail window open, drag the suspicious spam/phishing mail from your Inbox into the New Mail Window. It will attach the mail as an enclosure and a small icon with a light yellow envelope will appear in the attachments section of the – New Mail.​​
  • Send the mail.​​ ​​

If you have accidentally clicked on the link and already given any personal details to the phishers it is vitally important that you immediately go to the USERADM page (either
http://www.sun.ac.za/password or www.sun.ac.za/useradm and change your password immediately.) Make sure the new password is completely different, and is a strong password that will not be easily guessed, as well as changing the passwords on your social media and private e-mail accounts, especially if you use the same passwords on these accounts. Contact the IT Service Desk if you are still unsure.

 

[:]

Email

Tags:
Posted in Security | Comments Off on [:en]Phishing scam sent from compromised GOV.ZA account[:]

[:en]Phishing attempt from sun accounts[:af]Phishing vanaf ’n sun e-posrekening[:]

Tuesday, July 16th, 2019

[:en]

Staff and students are still falling for this phishing scam, so please be alert when receiving ANY emails from a sun account regarding the request for a quote.

An email with the subject “RFQ” which appears to be from a sun email address was sent to staff and students. The email asks you to click on a link to view a request for a quotation. (also see image below)

This is not a legitimate email, but a phishing attempt from a compromised staff account.

Never provide any personal information by means of email. By clicking on links and providing your information, you give criminals access to your personal information and your accounts.

If you clicked on the link in this phishing email, immediately change your password on www.sun.ac.za/password. For enquiries contact the IT Service Desk by logging a request or calling 808 4367. More information on phishing is available on our blog and Twitter.

[:af]

Personeel en studente is steeds slagoffers van die RFQ strikroof-aanval. Wees asseblief bedag wanneer jy ENIGE e-pos vanaf ’n sun-rekening ontvang oor ’n kwotasieversoek.

​’n E-pos met die onderwerp “RFQ” is Woensdag aan sommige studente en personeel gestuur vanaf, wat lyk soos, ’n sun e-pos adres. Die e-pos versoek dat jy op ’n skakel kliek om ’n kwotasieversoek te sien.  

​Hierdie e-pos is nie ’n geldige e-pos van die persoon nie, maar ’n gekompromiteerde sun personeelrekening. Sedert Woendag is verskeie sun e-posadresse op hierdie wyse blootgestel. Dit het gebeur omdat meer van ons personeel geval het vir die phishing e-pos, op die skakel gekliek het en hulle persoonlike inligting verskaf het. 

Wees asb. versigtig wanneer jy ENIGE e-posse van sun e-posadresse ontvang wat ’n kwotasie versoek. Kontak eerder die persoon direk om seker te maak dis geldig. Indien jy nie die persoon ken nie, is dit waarskynlik nie veilig nie, selfs al is dit vanaf ’n sun-adres gestuur.

Moet nooit persoonlike inligting deur middel van e-pos verskaf nie. Indien jy op skakels kliek en jou inligting gee, gee jy toegang aan krininele tot jou persoonlike inligting en jou rekeninge. 

Indien jy gekliek het op die skakel in ’n phishing e-pos, verander onmiddellik jou wagwoord by www.sun.ac.za/password. Vir navrae, kontak die IT Dienstoonbank deur ’n  versoek aan te teken of bel 808 4367. Meer inligting oor kubersekuriteit is beskikbaar op ons blog en deurlopende nuus word geplaas op  Twitter.

 

[:]

Email

Tags:
Posted in News, Security | Comments Off on [:en]Phishing attempt from sun accounts[:af]Phishing vanaf ’n sun e-posrekening[:]

« Older Entries
Newer Entries »