SEARCH
  • [:en]Recent Posts[:af]Onlangse bydraes

  • [:en]Categories[:af]Kategorieë

  • [:en]Archives[:af]Argiewe

Security

Cape of Storms and e-mail stormsKaap van Storms en e-pos storms

Friday, August 16th, 2013

We’ve been having plenty of stormy weather over the past few days, so in keeping with the theme, did you know you even get e-mail storms?

“An email storm is a sudden spike of Reply All messages on an email distribution list, usually caused by a controversial or misdirected message. Such storms start when multiple members of the distribution list reply to the entire list at the same time in response to the instigating message. Other members soon respond, usually adding vitriol to the discussion, asking to be removed from the list, or pleading for the cessation of messages. If enough members reply to these unwanted messages this triggers a chain reaction of email messages. The sheer load of traffic generated by these storms can render the email servers inoperative, similar to a DDoS attack.

A related phenomenon occurs when a subscriber to a mailing list emails the mailing list to “UNSUBSCRIBE”. People will reply to the hapless individual on the mailing list, half of them advising on how to unsubscribe, the other half referring to the manual of the mailing list manager. More subscribers will reply to the previous round of respondents, again to the list, this time about mailing list etiquette.

Some email viruses also have the capacity to create email storms, by sending copies of themselves to an infected user’s contacts, including distribution lists, infecting the contacts in turn.”

[SOURCE: www.wikipedia.org]

 

Die Wes-Kaap is die afgelope week met mening deur stormweer geteister. Maar het jy geweet dat daar selfs in die tegnologiese wêreld storms is – e-pos storms.

`n E-pos storm is `n skielike toename in Reply All boodskappe op `n e-pos verspreidingslys, gewoonlik veroorsaak deur `n kontroversiële of verkeerdelik geadresseerde boodskap. Hierdie storms ontstaan wanneer veelvuldige lede van `n verspreidingslys antwoord aan almal op die hele lys in reaksie op die aanhitsende boodskap. Ander lede antwoord gevolglik vinnig, vra om verwyder te word van die lys of dat die boodskappe moet stop, maar gooi daardeur nog meer olie op die vuur. 

Indien genoeg lede antwoord op hierdie ongevraagde boodskap ontlont dit `n kettingreaksie van e-posadresse. Die brute lading van verkeer gegenereer deur dié storms kan selfs e-pos bedieners plattrek.

`n Soortgelyke verskynsel vind plaas wanneer `n intekenaar van `n verspreidingslys aan die lys e-pos stuur op te  “UNSUBSCRIBE”. Ander lede sal die arme individu antwoord en raadgee oor hoe om die lys te verlaat of die persoon verwys na die handleiding. Nog meer intekenare sal op die vorige persone antwoord – hierdie keer oor e-pos etiket.

Sommige e-pos virusse kan ook e-pos storms veroorsaak deur kopieë van hulself te stuur na `n besmette gebruiker se kontakte en verspreidingslyte en dan ook die kontakte in die proses besmet. 

[SOURCE: www.wikipedia.org]

 

SARS wants to give you money?SARS wil vir JOU geld gee?

Friday, August 2nd, 2013

 It’s that time of the year when our mailboxes are infiltrated by messages from SARS and we start making sums and filling out forms. Unfortunately elusive cyber criminals also know that this is the perfect time to prey on our gullibility.

So it’s most likely that you will be receiving (if you haven’t already) a so-called e-mail from SARS asking you either to verify your information or to let you know that a much-welcomed amount has been paid into your account. (see example below) Don’t get excited – it’s not really SARS.

Clicking on the hyperlink in the email takes you to a fake “e-filing” site that has hyperlinks for the four big South African banks and instructions to log on to your Internet banking site for “confirmation of your details”.  When you follow the Nedbank link (as an example), you are taken to a copy of the Nedbank internet banking site that asks for profile, pin and password.  Supplying these takes you to a second page that asks you for your mobile number.  Submitting information on this page takes you to a page that requests the reference number sent to your cellphone.

Do not authorise any cellphone message that comes through if you end up in the above situation.  Furthermore, do not click on any hyperlinks in emails or divulge your account or mobile number details to anyone over the phone or via email.  Banks will never ask you to access internet banking through a link in an email, neither will banks ever ask for your mobile number when you access internet banking.

Look out for the following tell-tale signs:

–  when you move with your pc’s mouse over the link, it won’t be the official, correct web address
–  the e-mail isn’t addressed to you personally – your name isn’t mentioned anywhere
–  the address it was sent from is a generic one that doesn’t exist
–  there is no reference or account number
–  no contact person is mentioned

If you’re unsure, rather go directly to the SARS e-filing web site (type in http://www.sarsefiling.co.za/) and see if there were any payments made to your account.

———————————————————————————————–

From: Sars Efiling <message@sars.co.za>
Date: 30 July 2013 19:37:38 EDT
To: <fakeaddress@sun.ac.za>
Subject: You have a new transaction message

We have filed your return and made a deposit of R3,650.80 into your account.

Confirm your filing

This is an automated email, replies sent to this address will not be received.

Sars eFiling

 

Dis weer die gevreedse tyd van die jaar wanneer ons posbusse geinfiltreer word deur boodskappe van SARS en ons paniekerig begin sommetjies maak en vorms invul. Ongelukkig besef die bedrieglike kuberkriminele ook dat dit die perfekte tyd is om misbruik te maak van mense se goedgelowigheid.

Die kans is dus goed dat jy binnekort (indien jy nie reeds het nie) `n sogenaamde e-pos van SARS sal ontvang wat jou vra om jou inligting te verifieer of om jou te laat weet dat daar vir jou `n gawe bedraggie in jou rekening inbetaal is. (sien voorbeeld onder) Moenie opgewonde raak nie – dis nie SARS nie. 

As jy kliek op die skakel, neem die e-pos jou waarskynlik na `n vals “e-filing” webwerf wat skakels het na vier groot Suid-Afrikaanse banke en instruksies om aan te teken op deur middel van internet bankdienste om jou details te “bevestig”.

As jy (byvoorbeeld) die Nedbank-skakel volg, word jy geneem na `n kopie van nie Nedbank internetdienste webwerf wat vra vir jou profiel, pin en wagwoord.  As jy hierdie inligting verskaf, word jy geneem na `n tweede blad waar daar vir jou selnommer gevra word. Deur die inligting te verskaf, word jy weereens na `n volgende blad geneem wat versoek dat die verwysingsnommer na jou selfoon gestuur word.   

Moet onder geen omstandighede enige magtiging gee per selfoonboodskap as jy in bogenoemde situasie beland nie. Moet ook nie kliek op enige skakels in e-posse of rekeningbesonderhede of selfoonnommer-details aan enigiemand verskaf per e-pos of telefonies nie.

Kyk uit vir die volgende:

–  as jy met jou rekenaar se muis oor die skakel beweeg en dis nie die amptelike adres nie.
– die e-pos is nie aan jou geaddresseer nie – maw jou naam word nerens in die e-pos genoem nie.
– die adres waarvan dit gestuur het, is `n generiese adres wat nie bestaan nie.
– daar is geen verwysings- of rekeningnommer nie.
–  geen kontakpersoon word genoem nie.

Indien jy twyfel, gaan eerder na SARS se eie e-filing webwerf (tik http://www.sarsefiling.co.za/ in) en gaan kyk of daar inderdaad vir jou ‘n inbetaling is. 

———————————————————————————————–

From: Sars Efiling < message@sars.co.za>
Date: 30 July 2013 19:37:38 EDT
To: @sun.ac.za>
Subject: You have a new transaction message

We have filed your return and made a deposit of R3,650.80 into your account.

Confirm your filing

This is an automated email, replies sent to this address will not be received.

Sars eFiling

 

Beware of suspect phone callsOppas vir suspisieuse oproepe

Tuesday, July 9th, 2013

If you receive a call at home from someone who claims to be a Microsoft representative, the odds that it’s a variation of the Indian phone scam is most likely.

These fraudsters target phone numbers everywhere to try and con computer users into installing malware and spyware on their pc’s by claiming they’re ridding the said pc of all kinds of viruses and threats.

The caller claims that the security settings on their pc has to be updated and after this is done, they ask your credit card number for payment of their service.

Do not fall for these scam artists. Ask yourself how they know know you have a pc? Did they address you on your name and have your details (contact numbers, etc)? Did they specifically state their company’s name? The odds that someone will call you out of the blue to assist you with computer updates are in all probability less than zero.

More info on this scam:

http://answers.microsoft.com/en-us/protect/forum/mse-protect_scanning/phone-call-scams/aefc50a4-d7a4-4c79-8db5-2fafcd6ad196

http://fullcomment.nationalpost.com/2013/03/21/joe-oconnor-microsoft-windows-scam-a-grift-that-keeps-giving-for-cyber-crooks/

 

As jy `n oproep ontvang vanaf `n beweerde Microsoft-verteenwoordiger is die kans goed dat dit `n weergawe van die Indiese telefoon “scam” is. Kuberkriminele teiken foonnommers wêreldwyd en probeer rekenaargebruikers bedrieg deur verstellings te maak wat deur virusse en ander gevare van die betrokke rekenaar sal verwyder. 

Die persoon beweer dat die sekuriteitsverstellings van die rekenaar verouderd is en opgedateer moet word. In die proses gee die slagoffer toegang tot sy rekenaar en kan “malware” en “spyware” geinstalleer word. Die kredietkaartnommer word ook versoek as betaling vir die diens wat gelewer is. 

Moet onder geen omstandighede val vir hierdie skelmstreek nie. Vra jouself die volgende vrae af – hoe weet hulle jy het `n rekenaar? Het hulle jou aangespreek op jou naam en jou inligting verskaf? Het hulle duidelik die naam en inligting oor die maatskappy waarvoor hulle werk verskaf? Die waarskynlikheid dat iemand jou uit die bloute sal skakel om te help met jou rekenaars se opdaterings is bitter skraal.

Meer inligting oor hierdie foonswendelary:

http://answers.microsoft.com/en-us/protect/forum/mse-protect_scanning/phone-call-scams/aefc50a4-d7a4-4c79-8db5-2fafcd6ad196

http://fullcomment.nationalpost.com/2013/03/21/joe-oconnor-microsoft-windows-scam-a-grift-that-keeps-giving-for-cyber-crooks/

WARNING: New phishing e-mailWAARSKUWING: Nuwe “phishing” e-pos

Tuesday, June 18th, 2013

If you receive an email claiming to be from the IT department (see example below), do not open it or click on any of the links.

This is a phishing email attempting to acquire your passwords and other information. Immediately delete the email and do not reply to it.

IT e-mails will always be in the same format with IT’s name, correct contact details, the SU logo and and English and Afrikaans version. Please read our guidelines on how to distinguish between an offical e-mail and a phishing e-mail here.


From: University Mail Quota Verification [mailto:donotclickhere@cca.edu]
Sent: 17 June 2013 07:44 AM
Subject: Staff/Student/Employee

Dear: Webmail Subscriber

We hereby announce to you that your email account has exceeded its storage limit. You will be unable to send and receive mails and your email account will be deleted from our server. To avoid this problem, you are advised to verify your email account by clicking on the link
below:

http://universityhelpdeskteam.webs.com/

Thank you.
Copyright © 2013
The  System Administrator Management Team.

 

 

Indien jy `n e-pos ontvang met onderstaande inhoud wat lyk of dit deur die IT-afdeling gestuur is, moet onder geen omstandighede op die skakels kliek nie.

Hierdie is `n “phishing” e-pos wat poog om u wagwoord en ander inligting te oes. Verwyder dadelik die e-pos en moenie daarop reageer nie.

IT e-posse sal dieselfde formaat hê met IT se naam, regte kontakdetails, die US-logo en `n Afrikaanse en Engelse weergawe. Lees ook asseblief ons riglyne oor hoe om te onderskei tussen `n amptelike e-pos en `n “phishing” e-pos hier.


From: University Mail Quota Verification [mailto:donotclickhere@cca.edu]
Sent: 17 June 2013 07:44 AM
Subject: Staff/Student/Employee

Dear: Webmail Subscriber

We hereby announce to you that your email account has exceeded its storage limit. You will be unable to send and receive mails and your email account will be deleted from our server. To avoid this problem, you are advised to verify your email account by clicking on the link
below:

http://universityhelpdeskteam.webs.com/

Thank you.
Copyright © 2013
The  System Administrator Management Team.

Declare war on spamVerklaar oorlog teen gemorspos

Friday, June 7th, 2013

If your first mail in the morning is junk mail or spam, it’s enough to start your day off on the wrong foot. But did you know you can do something about it?  

Spam, or junk mail is defined as identical, disruptive e-emails sent to a large amount of e-mail or cellphone users When a receiver clicks on one of the links in the message, he/she is diverted to a phishing website or websites containing malware.  Spam e-mails can also contain hidden malware scripts.

Recently there has been various iterations of spam and phishing. One variation seems to be from SARS, another from ABSA and yet another one from the IT department.  Don’t ever respond ever to mail sent to you by “persons unknown”. If you are unsure phone or e-mail the IT Helpdesk (021-8084367) or e-mail them at helpinfo@sun.ac.za, otherwise call or e-mail your local computer expert who can advise or at least check-up for you.

Mail from Information Technology will always be branded and clearly addressed to you, will have an English and an Afrikaans translation and will always contain links that point to the “sun.ac.za” domain and never anything else.  

Unsure how to distinguish between the real thing and spam or phishing e-mails? Read more about it on our selfhelp wiki and you’ll find various examples on our blog.

If you’re bombarded by spam om a regular basis, there’s one way of declaring war on it. Did you know you can send the relevant mail to IT so we can block the user, domain and/or service provider? Just follow these simple instructions below.

HOW TO REPORT A SPAM E-MAIL 

  1. Start with a new e-mail in Outlook
  2. Click on File, New, Mail message.
  3. Type sysadm@sun.ac.za in the To-field.
  4. Type SPAM in the Subject-field.
  5. Click on Insert and choose Item OR click on the paperclip and choose Item.
  6. Select the SPAM (activate inetkey) e-mail that you want to send and click on OK.
  7. Click on Send.​​

For more a detailed description, go to our wiki.

[INFORMATION SUPPLIED BY DAVID WILES]

As jou eerste e-pos een of ander vorm van gemorspos aanneem, is dit genoeg rede om jou frustrasievlakke voor jou eerste koppie koffie al die hoogte in te laat skiet. Maar kan jy iets daaraan doen?

Gemorspos, of te wel “spam”, is wanneer identiese, meestal steurende,  boodskappe na `n groot hoeveelheid e-pos- of selfoongebruikers gestuur word. As `n ontvanger kliek op een van die skakels in die boodskap, word hulle herlei na strikroof webwerwe of webwerwe wat “malware” huisves. “Spam” e-posse kan ook versteekte “malware” skripte bevat.

Die afgelope tyd was daar verskeie weergawes van gemorspos en “phishing. Voorbeelde van SARS,  ABSA en selfs `n e-pos wat voorgee om van IT te wees, het opgeduik. Hoe oortuigend dit ookal lyk, moet nooit reageer op `n e-pos wat aan jou gestuur word deur `n onbekende entiteit nie. Indien jy enigsins twyfel, skakel (021-8084367) die IT Dienstoonbank of stuur vir hulle e-pos by helpinfo@sun.ac.za. Kontak andersins jou plaaslike rekenaardeskundige wat ten minste vir jou kan raad gee of die e-pos kan nagaan.  

`n E-pos van IT sal altyd duidelik herkenbaar wees en spesifiek aan jou gerig. Daar sal altyd `n Afrikaanse en Engelse weergawe wees en die skakels sal altyd wys na Mail from  “sun.ac.za” domein en niks anders nie.

Steeds onseker hoe om te onderskei tussen die regte ding en gemorspos of “phishing” e-posse? Lees meer daaroor op ons selfhelp wiki en jy kan ook verskeie voorbeelde op ons blog kry.

As jy op `n gereelde basis toegegooi word onder gemorspos, is daar `n manier waarop jy kan terugbaklei. Het jy geweet jy kan die betrokke e-pos aan IT stuur sodat ons die gebruiker, sy domein en/of diensverskaffer kan blok? Volg net die eenvoudige instruksies hier onder. 

HOE OM `N SPAM E-POS AAN TE MELD 

  1. Skep `n nuwe e-pos in Outlook
  2. Kliek op File, New, Mail message.
  3. Tik sysadm@sun.ac.za in die adresveld.
  4. Tik SPAM in die Subject-veld.
  5. Kliek op Insert en kies Item OF kliek op die skuifspel en kies Item.
  6. Kies die gemorspos e-pos wat jy wil stuur en kliek op OK.
  7. Kliek op Send.​​

Vir `n gedetaileerde beskrywing, lees meer op ons wiki.

[INLIGTING VERSKAF DEUR DAVID WILES]