%PDF-1.3 1 0 obj << /Type /Catalog /Outlines 2 0 R /Pages 3 0 R >> endobj 2 0 obj << /Type /Outlines /Count 0 >> endobj 3 0 obj << /Type /Pages /Kids [6 0 R 16 0 R ] /Count 2 /Resources << /ProcSet 4 0 R /Font << /F1 8 0 R /F2 9 0 R /F3 10 0 R /F4 11 0 R >> >> /MediaBox [0.000 0.000 612.000 792.000] >> endobj 4 0 obj [/PDF /Text ] endobj 5 0 obj << /Creator (DOMPDF) /CreationDate (D:20240519013551+00'00') /ModDate (D:20240519013551+00'00') /Title (IT-artikels) >> endobj 6 0 obj << /Type /Page /Parent 3 0 R /Annots [ 12 0 R 14 0 R ] /Contents 7 0 R >> endobj 7 0 obj << /Length 4231 >> stream 0.702 0.800 0.816 rg 34.016 34.016 543.969 723.969 re f 1.000 1.000 1.000 rg 45.266 265.169 521.469 481.565 re f 0.773 0.773 0.773 rg 0.773 0.773 0.773 RG 45.266 746.734 m 566.734 746.734 l 565.984 745.984 l 46.016 745.984 l f 566.734 746.734 m 566.734 265.169 l 565.984 265.169 l 565.984 745.984 l f 45.266 746.734 m 45.266 265.169 l 46.016 265.169 l 46.016 745.984 l f 61.016 617.359 m 550.984 617.359 l 550.984 618.109 l 61.016 618.109 l f 1.000 1.000 1.000 rg BT 278.868 698.693 Td /F1 10.5 Tf [(POST LIST)] TJ ET 0.200 0.200 0.200 rg BT 212.789 670.111 Td /F1 14.4 Tf [(INFORMASIETEGNOLOGIE)] TJ ET BT 221.824 643.466 Td /F1 11.7 Tf [(INFORMATION TECHNOLOGY)] TJ ET BT 61.016 583.841 Td /F1 14.4 Tf [(NEW PHISHING E-MAIL CAUSES CONFUSION)] TJ ET 0.400 0.400 0.400 rg BT 61.016 564.033 Td /F3 9.0 Tf [(If you receive an email claiming to be from the SU IT department )] TJ ET BT 320.621 564.033 Td /F4 9.0 Tf [(\(see example below\),)] TJ ET BT 410.657 564.033 Td /F3 9.0 Tf [( do not open it or click on any of )] TJ ET BT 61.016 553.044 Td /F3 9.0 Tf [(the links or reply to the e-mail. The e-mail attempts to gain access to the university accounts using the sun.ac.za details )] TJ ET BT 61.016 542.055 Td /F3 9.0 Tf [(that looks initially genuine.)] TJ ET BT 61.016 522.066 Td /F3 9.0 Tf [(This is a phishing email attempting to acquire your passwords and other information. Immediately delete the email and do )] TJ ET BT 61.016 511.077 Td /F3 9.0 Tf [(not reply to it.)] TJ ET BT 61.016 491.088 Td /F3 9.0 Tf [(There are just a few of the obvious signs that this is a phishing e-mail designed to steal personal information from you. )] TJ ET BT 61.016 480.099 Td /F3 9.0 Tf [(You should never respond to mail like this both at work and at home, and you should never reveal any personal details )] TJ ET BT 61.016 469.110 Td /F3 9.0 Tf [(especially your username and password in an e-mail form or on a webpage that you access via an e-mail link.)] TJ ET BT 61.016 449.121 Td /F3 9.0 Tf [(IT will never request your username, password or other personal information by means of an e-mail.)] TJ ET BT 78.360 429.148 Td /F3 9.0 Tf [(1.)] TJ ET BT 91.016 429.132 Td /F3 9.0 Tf [(If it were a genuine message from Information Technology, there would be branding, and it would be in English )] TJ ET BT 91.016 418.143 Td /F3 9.0 Tf [(and Afrikaans. This one has nothing like that in this e-mail.)] TJ ET BT 78.360 407.170 Td /F3 9.0 Tf [(2.)] TJ ET BT 91.016 407.154 Td /F3 9.0 Tf [(The grammar is particularly bad. \(what is a “strong virus”?\))] TJ ET BT 78.360 396.181 Td /F3 9.0 Tf [(3.)] TJ ET BT 91.016 396.165 Td /F3 9.0 Tf [(We are university personnel and students or “users” we are not “subscribers”.)] TJ ET BT 78.360 385.192 Td /F3 9.0 Tf [(4.)] TJ ET BT 91.016 385.176 Td /F3 9.0 Tf [(Why would you have to enter your password in readable form in an insecure e-mail?)] TJ ET BT 78.360 374.203 Td /F3 9.0 Tf [(5.)] TJ ET BT 91.016 374.187 Td /F3 9.0 Tf [(There is no )] TJ ET 0.373 0.169 0.255 rg BT 138.536 374.187 Td /F3 9.0 Tf [(support@sun.ac.za)] TJ ET 0.373 0.169 0.255 RG 0.18 w 0 J [ ] 0 d 138.536 373.036 m 216.206 373.036 l S 0.400 0.400 0.400 rg BT 216.206 374.187 Td /F3 9.0 Tf [( e-mail address.)] TJ ET BT 78.360 363.214 Td /F3 9.0 Tf [(6.)] TJ ET BT 91.016 363.198 Td /F3 9.0 Tf [(If you do reply, you'll see the default reply address is an unknown one and not a sun address.)] TJ ET BT 78.360 352.225 Td /F3 9.0 Tf [(7.)] TJ ET BT 91.016 352.209 Td /F3 9.0 Tf [(The links and the actual sender/server originate in Korea.)] TJ ET 0.373 0.169 0.255 rg BT 61.016 332.220 Td /F3 9.0 Tf [(More information on phishing.)] TJ ET 0.18 w 0 J [ ] 0 d 61.016 331.069 m 179.564 331.069 l S 0.400 0.400 0.400 rg BT 61.016 312.231 Td /F3 9.0 Tf [( )] TJ ET BT 61.016 292.242 Td /F4 9.0 Tf [(EXAMPLE OF "PHISHING" E-MAIL:)] TJ ET 0.662 0.662 0.662 rg 0.662 0.662 0.662 RG 61.016 281.044 m 550.984 281.044 l 550.234 280.294 l 61.766 280.294 l f 0.172 0.172 0.172 rg 0.172 0.172 0.172 RG 550.984 281.044 m 550.984 265.169 l 550.234 265.169 l 550.234 280.294 l f 0.662 0.662 0.662 rg 0.662 0.662 0.662 RG 61.016 281.044 m 61.016 265.169 l 61.766 265.169 l 61.766 280.294 l f endstream endobj 8 0 obj << /Type /Font /Subtype /Type1 /Name /F1 /BaseFont /Helvetica-Bold /Encoding /WinAnsiEncoding >> endobj 9 0 obj << /Type /Font /Subtype /Type1 /Name /F2 /BaseFont /Helvetica /Encoding /WinAnsiEncoding >> endobj 10 0 obj << /Type /Font /Subtype /Type1 /Name /F3 /BaseFont /Helvetica-Oblique /Encoding /WinAnsiEncoding >> endobj 11 0 obj << /Type /Font /Subtype /Type1 /Name /F4 /BaseFont /Helvetica-BoldOblique /Encoding /WinAnsiEncoding >> endobj 12 0 obj << /Type /Annot /Subtype /Link /A 13 0 R /Border [0 0 0] /H /I /Rect [ 138.5357 373.3546 216.2057 382.5121 ] >> endobj 13 0 obj << /Type /Action /S /URI /URI (mailto:support@sun.ac.za) >> endobj 14 0 obj << /Type /Annot /Subtype /Link /A 15 0 R /Border [0 0 0] /H /I /Rect [ 61.0157 331.3876 179.5637 340.5451 ] >> endobj 15 0 obj << /Type /Action /S /URI /URI (https://stbsp01.stb.sun.ac.za/innov/it/it-help/Wiki Pages/Phishing.aspx) >> endobj 16 0 obj << /Type /Page /Parent 3 0 R /Contents 17 0 R >> endobj 17 0 obj << /Length 3548 >> stream 0.662 0.662 0.662 rg 0.662 0.662 0.662 RG 0.18 w 0 J [ ] 0 d 0.702 0.800 0.816 rg 34.016 34.016 543.969 723.969 re f 1.000 1.000 1.000 rg 45.266 293.244 521.469 464.741 re f 0.773 0.773 0.773 rg 0.773 0.773 0.773 RG 45.266 293.244 m 566.734 293.244 l 565.984 293.994 l 46.016 293.994 l f 566.734 757.984 m 566.734 293.244 l 565.984 293.994 l 565.984 757.984 l f 45.266 757.984 m 45.266 293.244 l 46.016 293.994 l 46.016 757.984 l f 0.172 0.172 0.172 rg 0.172 0.172 0.172 RG 61.016 407.439 m 550.984 407.439 l 550.234 408.189 l 61.766 408.189 l f 550.984 757.984 m 550.984 407.439 l 550.234 408.189 l 550.234 757.984 l f 0.662 0.662 0.662 rg 0.662 0.662 0.662 RG 61.016 757.984 m 61.016 407.439 l 61.766 408.189 l 61.766 757.984 l f 0.070 0.070 0.070 rg 0.070 0.070 0.070 RG 65.516 754.234 m 546.484 754.234 l 545.484 753.234 l 66.516 753.234 l f 0.560 0.560 0.560 rg 0.560 0.560 0.560 RG 65.516 411.939 m 546.484 411.939 l 545.484 412.939 l 66.516 412.939 l f 546.484 754.234 m 546.484 411.939 l 545.484 412.939 l 545.484 753.234 l f 0.070 0.070 0.070 rg 0.070 0.070 0.070 RG 65.516 754.234 m 65.516 411.939 l 66.516 412.939 l 66.516 753.234 l f 0.400 0.400 0.400 rg BT 70.266 731.693 Td /F3 9.0 Tf [(Dear sun.ac.za subscriber,)] TJ ET BT 70.266 711.704 Td /F3 9.0 Tf [(We are currently carrying out an upgrade on our system due to the fact that it has come to our notice that one or more )] TJ ET BT 70.266 700.715 Td /F3 9.0 Tf [(of our subscribers are introducing a very strong virus into our system and it is affecting our network.We are trying to )] TJ ET BT 70.266 689.726 Td /F3 9.0 Tf [(find out the specific person.)] TJ ET BT 70.266 669.737 Td /F3 9.0 Tf [(For this reason all subscribers are to provide their USER NAME AND PASSWORD for us to verify and have them )] TJ ET BT 70.266 658.748 Td /F3 9.0 Tf [(cleared against this virus. Failure to comply will lead to the termination of your Account in the next 48 hours.)] TJ ET BT 70.266 638.759 Td /F3 9.0 Tf [(Information Required:)] TJ ET BT 70.266 627.770 Td /F3 9.0 Tf [(* User name: \(................. \)\(Compulsory\))] TJ ET BT 70.266 616.781 Td /F3 9.0 Tf [(* Password: \(..........................\)\(Compulsory\))] TJ ET BT 70.266 605.792 Td /F3 9.0 Tf [(* Date of Birth: \(..........................\) \(optional\))] TJ ET BT 70.266 594.803 Td /F3 9.0 Tf [(* Country Or Territory: \(..................\) \(optional\))] TJ ET BT 70.266 574.814 Td /F3 9.0 Tf [(http://webmail.sun.ac.za/owa/auth/logon.aspx)] TJ ET BT 70.266 554.825 Td /F3 9.0 Tf [(Hoping to serve you better.)] TJ ET BT 70.266 543.836 Td /F3 9.0 Tf [(Sincerely, Universiteit Stellenbosch University)] TJ ET BT 70.266 532.847 Td /F3 9.0 Tf [(********************************************************)] TJ ET BT 70.266 521.858 Td /F3 9.0 Tf [(This is an Administrative Message from sun.ac.za server. It is not spam.)] TJ ET BT 70.266 510.869 Td /F3 9.0 Tf [(From time to time, sun.ac.za server will send you such messages in)] TJ ET BT 70.266 499.880 Td /F3 9.0 Tf [(order to communicate important information about your subscription. )] TJ ET BT 70.266 488.891 Td /F3 9.0 Tf [(*********************************************************)] TJ ET BT 70.266 468.902 Td /F3 9.0 Tf [( )] TJ ET BT 61.016 389.647 Td /F3 9.0 Tf [( )] TJ ET BT 61.016 369.658 Td /F3 9.0 Tf [( )] TJ ET BT 61.016 349.669 Td /F3 9.0 Tf [( )] TJ ET BT 61.016 329.680 Td /F3 9.0 Tf [( )] TJ ET BT 61.016 311.191 Td /F3 9.0 Tf [(Posted in:E-mail,Security | Tagged:Phishing,Security | With 0 comments)] TJ ET endstream endobj xref 0 18 0000000000 65535 f 0000000008 00000 n 0000000073 00000 n 0000000119 00000 n 0000000312 00000 n 0000000341 00000 n 0000000476 00000 n 0000000565 00000 n 0000004848 00000 n 0000004960 00000 n 0000005067 00000 n 0000005183 00000 n 0000005303 00000 n 0000005431 00000 n 0000005507 00000 n 0000005634 00000 n 0000005757 00000 n 0000005822 00000 n trailer << /Size 18 /Root 1 0 R /Info 5 0 R >> startxref 9423 %%EOF New phishing e-mail causes confusion « Informasietegnologie
Language:
SEARCH

  • Recent Posts

  • Categories

  • Archives

«
»

New phishing e-mail causes confusion

If you receive an email claiming to be from the SU IT department (see example below), do not open it or click on any of the links or reply to the e-mail. The e-mail attempts to gain access to the university accounts using the sun.ac.za details that looks initially genuine.

This is a phishing email attempting to acquire your passwords and other information. Immediately delete the email and do not reply to it.

There are just a few of the obvious signs that this is a phishing e-mail designed to steal personal information from you. You should never respond to mail like this both at work and at home, and you should never reveal any personal details especially your username and password in an e-mail form or on a webpage that you access via an e-mail link.

IT will never request your username, password or other personal information by means of an e-mail.

  1. If it were a genuine message from Information Technology, there would be branding, and it would be in English and Afrikaans. This one has nothing like that in this e-mail.
  2. The grammar is particularly bad. (what is a “strong virus”?)
  3. We are university personnel and students or “users” we are not “subscribers”.
  4. Why would you have to enter your password in readable form in an insecure e-mail?
  5. There is no support@sun.ac.za e-mail address.
  6. If you do reply, you’ll see the default reply address is an unknown one and not a sun address.
  7. The links and the actual sender/server originate in Korea.

More information on phishing.

 

EXAMPLE OF “PHISHING” E-MAIL:

Dear sun.ac.za subscriber,

We are currently carrying out an upgrade on our system due to the fact that it has come to our notice that one or more of our subscribers are introducing a very strong virus into our system and it is affecting our network.We are trying to find out the specific person.

For this reason all subscribers are to provide their USER NAME AND PASSWORD for us to verify and have them cleared against this virus. Failure to comply will lead to the termination of your Account in the next 48 hours.

Information Required:
* User name: (…………….. )(Compulsory)
* Password: (……………………..)(Compulsory)
* Date of Birth: (……………………..) (optional)
* Country Or Territory: (………………) (optional)

http://webmail.sun.ac.za/owa/auth/logon.aspx

Hoping to serve you better.
Sincerely, Universiteit Stellenbosch University
********************************************************
This is an Administrative Message from sun.ac.za server. It is not spam.
From time to time, sun.ac.za server will send you such messages in
order to communicate important information about your subscription. *********************************************************

 

 

 

 

 

Email

Tags: ,

This entry was posted on Tuesday, February 19th, 2013 at 9:13 am and is filed under E-mail, Security. You can follow any responses to this entry through the RSS 2.0 feed. Both comments and pings are currently closed.

Comments are closed.

 

© 2013-2024 Disclaimer: The views and opinions expressed in this page are strictly those of the page author(s) and content contributor(s). The contents of this page have not been reviewed or approved by Stellenbosch University.