%PDF-1.3 1 0 obj << /Type /Catalog /Outlines 2 0 R /Pages 3 0 R >> endobj 2 0 obj << /Type /Outlines /Count 0 >> endobj 3 0 obj << /Type /Pages /Kids [6 0 R 12 0 R ] /Count 2 /Resources << /ProcSet 4 0 R /Font << /F1 8 0 R /F2 9 0 R /F3 10 0 R /F4 11 0 R >> /XObject << /I1 14 0 R /I2 15 0 R >> >> /MediaBox [0.000 0.000 612.000 792.000] >> endobj 4 0 obj [/PDF /Text /ImageC ] endobj 5 0 obj << /Creator (DOMPDF) /CreationDate (D:20240518130214+00'00') /ModDate (D:20240518130214+00'00') /Title (IT-artikels) >> endobj 6 0 obj << /Type /Page /Parent 3 0 R /Contents 7 0 R >> endobj 7 0 obj << /Length 4764 >> stream 0.702 0.800 0.816 rg 34.016 34.016 543.969 723.969 re f 1.000 1.000 1.000 rg 45.266 76.120 521.469 670.614 re f 0.773 0.773 0.773 rg 0.773 0.773 0.773 RG 45.266 746.734 m 566.734 746.734 l 565.984 745.984 l 46.016 745.984 l f 566.734 746.734 m 566.734 76.120 l 565.984 76.120 l 565.984 745.984 l f 45.266 746.734 m 45.266 76.120 l 46.016 76.120 l 46.016 745.984 l f 61.016 617.359 m 550.984 617.359 l 550.984 618.109 l 61.016 618.109 l f 1.000 1.000 1.000 rg BT 278.868 698.693 Td /F1 10.5 Tf [(POST LIST)] TJ ET 0.200 0.200 0.200 rg BT 212.789 670.111 Td /F1 14.4 Tf [(INFORMASIETEGNOLOGIE)] TJ ET BT 221.824 643.466 Td /F1 11.7 Tf [(INFORMATION TECHNOLOGY)] TJ ET BT 61.016 583.841 Td /F1 14.4 Tf [(PHISHING ATTACK WITH SUBJECT: RE-VALIDATE)] TJ ET 0.400 0.400 0.400 rg BT 61.016 564.033 Td /F3 9.0 Tf [(With the graduation just around the corner and most students already on holiday, and many of our colleagues already )] TJ ET BT 61.016 553.044 Td /F3 9.0 Tf [(taking a well-deserved break, and collectively we all tend to be a little less vigilant.)] TJ ET BT 61.016 533.055 Td /F3 9.0 Tf [(The end of the year vacation period is generally a time when phishing attacksonour email accounts drop, and it is )] TJ ET BT 61.016 522.066 Td /F3 9.0 Tf [(speculated that the phishers know there are significantly fewer employees working during the holidays, so there are fewer )] TJ ET BT 61.016 511.077 Td /F3 9.0 Tf [(opportunities for targeted users to actually open malicious attachments.)] TJ ET BT 61.016 491.088 Td /F3 9.0 Tf [(However spear-phishing attacks increase when the Information technology and "cyber-security" centres of large )] TJ ET BT 61.016 480.099 Td /F3 9.0 Tf [(enterprises like the universitysecurity operations are lightly staffed or understaffed. The scammers know that there is a )] TJ ET BT 61.016 469.110 Td /F3 9.0 Tf [(greater chance for them to gain access to accounts via spear-phishing as the "watchdogs" are fewer.)] TJ ET BT 61.016 449.121 Td /F3 9.0 Tf [(What is spear-phishing?)] TJ ET BT 61.016 429.132 Td /F3 9.0 Tf [(Spear-phishing is a targeted form of phishing in which fraudulent emails are sent to specific individuals at an institution like )] TJ ET BT 61.016 418.143 Td /F3 9.0 Tf [(the universityin an effort to gain access to confidential information. Often a trustworthy entity is impersonatedthat uses)] TJ ET BT 61.016 407.154 Td /F3 9.0 Tf [("urgent" languageto requesting sensitive information or actions.)] TJ ET BT 61.016 387.165 Td /F3 9.0 Tf [([In August this year the MacEwan University in Canada was targeted whena series of fraudulent emails convinced )] TJ ET BT 61.016 376.176 Td /F3 9.0 Tf [(MacEwan University staff to change electronic banking information for one of the universitys major vendors, resulting in )] TJ ET BT 61.016 365.187 Td /F3 9.0 Tf [($11.8 million being transferred to criminals.])] TJ ET BT 61.016 345.198 Td /F3 9.0 Tf [(The following spear-phishing e-mail is appearing in some student and personnel accounts and it seems to be targeting )] TJ ET BT 61.016 334.209 Td /F3 9.0 Tf [(university accounts specifically as the salutation is a personal name: \(in this case your e-mail address, or in some cases )] TJ ET BT 61.016 323.220 Td /F3 9.0 Tf [(your display name in e-mail e.g Wiles, David )] TJ ET BT 61.016 303.231 Td /F3 9.0 Tf [(The mail will look like this:)] TJ ET BT 61.016 283.242 Td /F3 9.0 Tf [(~~~)] TJ ET 0.000 0.000 0.000 rg BT 61.016 264.753 Td /F4 9.0 Tf [(From:)] TJ ET BT 86.513 264.753 Td /F3 9.0 Tf [( Zimbra )] TJ ET BT 61.016 253.764 Td /F4 9.0 Tf [(Sent:)] TJ ET BT 83.516 253.764 Td /F3 9.0 Tf [( 01 December 2017 22:15)] TJ ET BT 61.016 242.775 Td /F4 9.0 Tf [(To:)] TJ ET BT 75.011 242.775 Td /F3 9.0 Tf [( Your Own name )] TJ ET BT 61.016 231.786 Td /F4 9.0 Tf [(Subject:)] TJ ET BT 96.521 231.786 Td /F3 9.0 Tf [( Re-Validate )] TJ ET 0.400 0.400 0.400 rg BT 61.016 220.797 Td /F3 9.0 Tf [()] TJ ET BT 61.016 209.808 Td /F3 9.0 Tf [(Dear your-e-mail@sun.ac.za ,)] TJ ET BT 61.016 188.019 Td /F3 9.0 Tf [(Your account has exceeded it quota limit as set by Administrator, and you may not be able to send or receive new mails )] TJ ET BT 61.016 177.030 Td /F3 9.0 Tf [(until you Re-Validate your your-e-mail@sun.ac.za account.)] TJ ET BT 61.016 155.241 Td /F3 9.0 Tf [(To Re-Validate account@sun.ac.za account, Please CLICK: )] TJ ET BT 303.260 155.241 Td /F3 9.0 Tf [(Re-Validate your-e-mail@sun.ac.za Account)] TJ ET 0.400 0.400 0.400 RG 0.18 w 0 J [ ] 0 d 303.260 154.090 m 480.452 154.090 l S BT 61.016 144.252 Td /F3 9.0 Tf [()] TJ ET BT 61.016 133.263 Td /F3 9.0 Tf [(~~~)] TJ ET BT 61.016 122.274 Td /F3 9.0 Tf [()] TJ ET endstream endobj 8 0 obj << /Type /Font /Subtype /Type1 /Name /F1 /BaseFont /Helvetica-Bold /Encoding /WinAnsiEncoding >> endobj 9 0 obj << /Type /Font /Subtype /Type1 /Name /F2 /BaseFont /Helvetica /Encoding /WinAnsiEncoding >> endobj 10 0 obj << /Type /Font /Subtype /Type1 /Name /F3 /BaseFont /Helvetica-Oblique /Encoding /WinAnsiEncoding >> endobj 11 0 obj << /Type /Font /Subtype /Type1 /Name /F4 /BaseFont /Helvetica-BoldOblique /Encoding /WinAnsiEncoding >> endobj 12 0 obj << /Type /Page /Parent 3 0 R /Contents 13 0 R >> endobj 13 0 obj << /Length 1527 >> stream 0.400 0.400 0.400 rg 0.400 0.400 0.400 RG 0.18 w 0 J [ ] 0 d 0.702 0.800 0.816 rg 34.016 34.016 543.969 723.969 re f 1.000 1.000 1.000 rg 45.266 304.972 521.469 453.012 re f 0.773 0.773 0.773 rg 0.773 0.773 0.773 RG 45.266 304.972 m 566.734 304.972 l 565.984 305.722 l 46.016 305.722 l f 566.734 757.984 m 566.734 304.972 l 565.984 305.722 l 565.984 757.984 l f 45.266 757.984 m 45.266 304.972 l 46.016 305.722 l 46.016 757.984 l f 0.400 0.400 0.400 rg BT 61.016 749.193 Td /F3 9.0 Tf [(If you click on the link you will be taken to a website that will show the following login window where you will be asked to fill )] TJ ET BT 61.016 738.204 Td /F3 9.0 Tf [(in your personal details and password. Once this happen the spear-phishers will have gained control over your email )] TJ ET BT 61.016 727.215 Td /F3 9.0 Tf [(account and will proceed to locate more sensitive information like other e-mail addresses and bank account details, for )] TJ ET BT 61.016 716.226 Td /F3 9.0 Tf [(example. Your e-mail account will then be used to attack other university accounts.)] TJ ET q 391.500 0 0 293.250 61.016 390.178 cm /I2 Do Q BT 61.016 372.387 Td /F3 9.0 Tf [(Please be aware of this spear-phishing scam. No university department or division will ever ask you for passwords via e-)] TJ ET BT 61.016 361.398 Td /F3 9.0 Tf [(mail.)] TJ ET BT 432.949 341.409 Td /F3 9.0 Tf [([ARTICLE BY DAVID WILES])] TJ ET BT 61.016 322.920 Td /F3 9.0 Tf [(Posted in:E-mail,Phishing,Security | Tagged:Phishing | With 0 comments)] TJ ET endstream endobj 14 0 obj << /Type /XObject /Subtype /Image /Width 522 /Height 391 /Filter /FlateDecode /DecodeParms << /Predictor 15 /Colors 1 /Columns 522 /BitsPerComponent 8>> /ColorSpace /DeviceGray /BitsPerComponent 8 /Length 812>> stream x1 0 'IU8l G cWA endstream endobj 15 0 obj << /Type /XObject /Subtype /Image /Width 522 /Height 391 /SMask 14 0 R /Filter /FlateDecode /DecodeParms << /Predictor 15 /Colors 3 /Columns 522 /BitsPerComponent 8>> /ColorSpace /DeviceRGB /BitsPerComponent 8 /Length 47167>> stream xweUyΉ{骲l%ƒf ng$@3Y0 A|$`1-VwWuU>.qˬ2ow>n܈ދ_ĉcpjd78q6t;p8'耓ptɃp8:p8pp88yp8G<8N'耓ptɃp8:p8pp88yp8G<8N'耓ptɃp8: >f޷О6Mf}r8ǥ#ܲiE .rٽ?pࡣv8ǵ# mh''Wtp87 6o:ph( $I@K5.imip@xKdrzVI)<=җ*FRW*JB$y!pp873ZãJRS-c'q3=3)Y.R W鳓ḙa晙IRT*VDklȺvɃp0sE"8ND[ߥ/tp873 !Suj[Tp8nr8;03/"Nb'耓ptɃp8:p8pp88yp8G<8N'˹X;W9ḹq1r+acΒ)Pnݕu8n<8:IʍiDƘoHRk%@#$2a7N$'sa8ن,!< c2@a i@ADV$B87:NXm ѰYCʂ04cAB!B87:Ng 4"% iNbl`c!aRN<%)n&+ʛe4RpD1sh)0uLgё0&qT6?@d S 860(pXӓrlM\mJFqN5 P5|lzR2rm9y$1FZѵ?q4˛w=иh э=JNshImDgv>7" o<&V\*O݄"ČAD DBDBdqN5:RyW1>U=3BSw ]*#! q膋vauUB 4đ"~#&w)ɮA2$MR;^Z 4&`o[/}C'i70p-8ʁHيM^:UgNiјac b GF 1:Mu*Ђ0lK#M(GhB RJ qsqK3D )ԫfOB"jl;~Xfb@M굀M$%Ұ1FE yjfFw 71`tNJh MMZT, Q܈t8֕ft3]5h4-_y+ީj^.xͺhu?H B11VtPV󜉒jI"ΟacF*wVE B"BBd[W5MUA $ ӓ/պ56CYT}HDPdMCzVֻRm I7q0<c8f"R i[euyuYp5af8 ä']}m`z#'7vq$ pL=tb]QO?D{t|`"z[lu{XNST43t[[wj@1 &W\90Mir"RYJ 6ɴl?л'amԪ]PAD"J*%RRRJ!e>"S?Uz ]+l#4M!gFVٷoj5׼~cf=F;=;|K 3)UkíۣuC έLqD3SމCr|v# `ʕdpxx]߇M:-ζӽgNOO"[P/4R2*޸%ژ]V{9g>8Z?v]6}hL`D2F֦G=oo3w;fy_wSf"Rӧ^C'G)e+m;C PQ| OyGNMPlm{ [FY0,UmGDJg(;<O1\P!L©cO}px_05o>ɞ;+%{R<F9^@_~Z5jG{P v?` kHMO}m.)(,4kC"lV^}N5:ܱԨ 7q# 2˩`ߛׂ}i^%y쌘 ֖;mm=˞D;qě: 5QWjֶ;Ӂ $"/ #''z`-fK/ tk{o~ToUY5~ƾ_>ߌB`~4Y0s5t^ hOwȚoZMyF{~O-&Yj}N.oBIy{yR!hۭOZmW<2v$$ARDdʧOgoWǃ'J{Xd3Ox'μJAwh' ,굥#^*z~o{wj- [tIs0憃*MY&]ٸks9ѿܔRvoFùa`Ba] *64O!2]jFNV~֮ڀ4l{6|۳6x{TJ66ՙ;uZ8b6 "8dgE!M P8vH|AS3_Qyq19>o֓TOy!syjl u+;۸ Sw(&IZkY_j5,fըw0w⨚PC0Mtz*UB)%%0_v\'8y8 8l pPdP2L@ *0ɱʓ_*b״e|pd:#$!I)d 2oV:ނqQqFfjԣ86"Iu#j;sD]D#[o0}KnPR0 eAҡ.`D3SS;Bd$A#E^8$bV @UQy O?%qđnrŭVFJ)OһaqDd6:Ҩ$CPfN@q*3O^{i!m8r}ë7hIϩC &"6l55.鉁Ğ)hL-ox XqVdKϤқ~Q.W @A!>1SaWq.-FDB/TyʕDq3 M)č  2F Uَ:\PaQ~J/06_dt{l{kj[13gUslY;Z~N Bg 5ar]1'xt-"")^Bo-ՙG[/U&ޕXr7.- >w^8. f?Kxbpj퇶(W*RG+ÝCijpN-76HU0jtj=l"` ?8a&c}S9QQJuѓra׫/;m9]̖{HZm~d߮6ht{<*$@ 2xdn򠥜XvXy㈴SkV7$l,0¾-w7s w ̀bZd$a0e+As 0K)  ޾ _h{ oG]{mXnzf"J7U>S#$AШePJz |SJ*)(we6JL{B1(16^alz-@{w^e'Vd=ZYIz[C`vڛW{SR 3̵A*%= RinoN/*hqCaIX@n'N %1-Ůj@ )H`M(K R'{YuX7GOF.?p#b6vmJ%ko9;޵"jBHىzaf`zJeJ)XUs``6=`)h6m50RolʃTJ -bQ6;hmPT&\GT,Y)!i~݃=J((DHߦl΢ɴ13b[J{`xMV]V]f/JL`<߷JO|%8yp. Dn\%ʼnBEH6xk۽iT{>k6i>G_ElP:YZZH|lKÐ8End`#7x* ?">]2f} Xactyxc#d/y'ʳv&,,k0bhn6w"}sRe,Å'<4\R((JjҝYL`oWm CwڭжأE2*y*s>aв$퀰 +vѷUwF.[yme!~s~ ɰT,+KmGL!˺5PZ8/AR1 {Rؙ]I1?Qk#dR,ճaERB[7 N 3 Ou,FӰ霁9)*L08IRi,'+_Rgˡ"ą{vp]hd.Y놶k\vrsVEl;iE90X5Xb#DX7s sC\1C:4XݾJ,(*cϳ(SS'8AŝA$ {FDBW/,7>n$2mh踻6$Q~ZIœ3x @;y3g/gպYY^ ]r;n2<\i֧AmD.F'̪fz l+7D!?xGlH7GQ^u}BFWFVEqՊ0t>u;mWE(ca=ʝΥИC{ڴ1nf'ՙKFR1iܬMQؖ+5ܶan>73eR)U,T;ޑ5Rٔk*{A}õBv:qfpE=__ޱajL2GYKluioWe/;vh]>f[RvƔ^xn<, FDԪ3" I /|g-J xذ-VAlǹ}ppAW|U C=O"ϭjtN1,W5Kl9!_"R}^kwTyسFiR}s?@ a͇sl]V}2lly=qn:"">xϳ_$-azl6툥*2,+ӆkS[#'f}8t[JD6[jgՉcv6+iW=z]r|ʤ~J? lU;OpkRWQK;qpNI+ 9 DdA(s~ {T- D_~5+ O=3DB [r,*X{Z4Aa.UOatCx7{x_ӗ,_._.[-99ψiBRf}Ha;ˣs%!j{-<
7yD2"{ jO\DdO?mg>}$̾=lØDtǩ0n3r]Z9\; oN=mwT^4a#DstǽW AYj'Ĥu LhQ_ЖZHdvސюgeI6l=Kψ,Ԏ'lmJb)(ren9z@qjܫR1hLv$hPf<=exhM1nkcd'1zRB^ΉÍ̭+ĉI50ؔtJRLd-Ӂ{S$6ˍM|o8̲k7AY w7.W=\|lf ";%0,ltZf<[Ig?icݤ7$< wD&ח9HBT'2AZ&ԟc)҅@!L~vعQGCaEQIR )Һ۴'hDWWq*RRxw 0Lx0@ ,A"Jv;JkfRR\2 DphC8* 01I=,@Z,Žͼmf%JAzJs|6 ѺM5aEQLIM'$dADfFki-D(/)[6{["P! "J!\ ,өIԤ҆ ̌e֕TmmNcDB? H䅠vc!HBβ(_=D~Z`J%m:3 [|;[ &TRRH97A#3#"J) *@fsokQzl[16D6-$3q7<̄(vٓ<cg"2lP#֗MuV!2Ǭ%eϠ.j^)e!H[yB~gO`Ipfb^QI!L4MRujG~ R$()@Bf֩NRBr8y/ݐ`P,ijs3\&ho %Z_5?rrjn) lPJi' id}a*D"(m *3'D(XI#F#ȗV[x B$"VJ0!l O)BR>l씍`سEDfӶPf'ųBMWz(ZvȞ7]>\E{TJjl vZɆ "3hE*TjY[' 7,vȧ̬ c4hۼdGٖNr1-(iru6gd7e@H(hAR1Ƙ%B~"(+,m%ێr[U@ lSQKPvv^H08\6sօv,랝x9obHH9gͪ:CDxCrO!<.K"#L~lZʔFPnON6|\pg=?$GX/e5X0] D "#Yy&kf#yl3oNš`, ׄ[Z`n@b4Dr{Ƴ&b$՗-hnl&d"$g߃scr5 1dM)d !f;̻Ece$ҶہNYhs Y0>ӳ?ж]v>PإO Z"07ICf2 b.sq\6JNose^9E|Zcw5_ձD;{]z;y Țsyse{n GY6xEz帆8yWEs3չ\stZ|ɢ ߢ QmMɭsp8 p8pp88yp8G<8N'耓ptɃp8:p8pp88yp8G<8N'耓ptɃp8:p8pp88yp8G<8Zwp\>y#oK^o_nw}\:}/?ogUY\N;S<8#;g?߳m #_u6N5gNص{M%_SGx}l:}зл3K1-"vC_ޘˎO}kb?z>Ge|DT3WKZ,N?fW%~Zw~S7A}!8W>B+w~8o'sEm}ߝ(?('u>٣a{Ue}tcſgWxGV,>3{ oox#/ڧ盖ew=?8W~ ;‡~hÞ_Okgwko?#/?'p_Dt|=@4;?_۬U_?϶K_?+b xϯ۪sgb ޳mrƾ2@_)Y?51ӂk?L<Rڇ~wL?O~~Ї~CO}}v~ck?>\:#w>~_۳uqp\/ {ytxa{{ٺj Iowpkg~DS=H1'TP29c?_ G?`;?6=<ѻ9ӿ}a_'?6>?v dqG}JFBasz﫿yO ffqqpk/؋Oco F'IKo܈+uOgF|-o^ @!7qqǐؘ$8#6&M(NR `1 f6ŝ? xO_83[{n;rf5{ m{(UWVPB٫RB{4Is~0DPm%9yoN9yN*>AఘnĄɹnY?D6 ksm:~1QqnQpwf-+WTmm=֌Wm,qࣛl߲-.Gyڷd)3 {swXl bX,sYb+DL qJ'5; 7ôuhK?A]anڮ;WbHg'J ,@ePsN:yX\ދ--0ן|vdtƵGsw>8[}K'(Z?esFOP`< tzjⶉIb.viTr|`#o_jjАɡ~VI8l @ zܦyFpb!~h(?Oz7fȊ=c笰SKwiq@#c|Ұ@]MkQUԚi|zevƝ$qӞ0d;_uJ.N/}lp]=7]C/^jj1<ex @[HE]e/K$"h mo;|6pb˓*,vdjEo]Q0Pmo>{BrwH8~ml5-y+濲wno`S>@F$8^olA'LPH6Hz<*2 ~YfBi0w]W+Z]^wK| i?0' BCȱ!Q*{og]`V=^i`H3Eʹ8}'0@>;0vdދ#Y,}dx=6%l0 z(,9|na'JYm m8+~6w6ѩ[mv^ϥS0~Рu3BҘ')ʳTٹ-#ln2{ajK(O`< o(Z_\3c7Aސl,EK3o[4ajd/WZcnhL|F ./J2vxUUM.-=x: ֬y'B4ymr<l.fQ7}4x.o˗aja6 P_( 2K!x@!B!?0BBB~`< !!x@!rcLz+ A+@W'O /x0[AyG1]Sz|i0`yׇ\/N.Ο>Phmoi G;7oAcL<uygNRHHT܆$~-?[|/ʍO[pw| UT] 17WupuyХjņH j#YmNtԃ箱%Dz}+ OsZCv?\ѣQZC^l{}Ψ(!JkxSuMC0JMq2LeRZz;—6fY]Gq mXt޵^cz*a YyoɟYe.zƛz~x{р¹#GM:~oW[;„XwO7z- wguקFeźZ?8cQ.8*emKwg~[f=ave{B5{Ob{>-pޯ\Si{нY0rOyθ|_qCMޏFujUfMiXK\=`Rz]nE~X:=݆}whӻU/oh:g?u0aͯv8Auϻ>z/n:˳!w#3↚][ ٹbK۾5*-lv>7,֤AN7Fj 2lvZj?}L&t- Ja ɒS{u7dQ, bٔ~ ]M;'V#E0 ܰ@цL0xx\S{EGIbxޝ^vduIaoX}~_OXE4sCozsQ`F)[=5a?} Ib!ͩmh8VQtgw~vO쐩s6԰y? 26[yK\):04Py e_W}^.@?YE[um^<q8>MXL cclO6ӞzkՇO?>V-ϲ|*0"6VT%2Xw'n aq=?^΂_3J37ȖJDiNșwAmrZ|߻ۭ Sxq+B]2 X$e1^ Y ͐l. >M8|6^Ͱ"s H8$u]4`q,h; p3}F3Bp  '8inKH>wiY>>*qXB[6xkE' Kgo_Xd=tuvcK/?4.nԸoo,zj3o9EezQ)q3_+k9QN):C؇y}QB"ֳp:Z3%'{6"!9ZSߟݩT}ήζj052/n9rp7k0= i3 0EήǤ&R tdgFasSM1Y'qW5ާI=2Jh?Vbv8sUE]2vX差P&W z,x^wC^hck$%;k@29aDQ}c-ʪQѲcq7)kwqꁡw=7\ۜQ'9+P]nl[cqUh c 1̩+~p6`|IÌsWn<ҵaber`f(l[&)2:!ͷ֗Y,TV/Ym٭ZhiYGWվ:(u|ÆS4*ۂN<e7H۱zgYTOq$Ţ(I^_yEb Uy?4;PAaɱ>Lݖ>{ۖqڱ6ɢ(E{k(q6V-/l0ؿrK7f۲aUi=|9|$XzM=iL$X,i?^UYPe\W^^fhwNLM0p"9xAmE .\hz7+G^u6Zp§nMpɳcN ^bZp#U:zbU~ 4|Mq"|;_lLŽLx% 2A[nVyv%Z,GZΩHETų J3ӪOҡ7xg恚Va#uA/1\>-%\xկ P7G,WV;q_Ttt T$QΪ=7ݝ$cQ_Q:lsc +:G̙7[fy*li m$[9#G}}ΡUSV =q. Jk>aWn' pZ)J$s%dD2 ~laČ١|]k4cdߟ;O G 115Qe_1E*,;W?qJCo\pp vKk=Ka*M!u<Ʉ`@,5Y pETMkHIH>Ø[ RNTqVMHՁDpQl >2P' "(M5J 92E^o.[epT r&D%(<sѤh%P- .oNV j\VQJ~7 rY$\MHXvnk9I&+d P-0zEbpj6uz.EIuj=t oY Ek:ysƭOl Ȑ}㢅=_h6{"ж6KL|w9L/laHt`.iM}왑2,#hn*RU^,>;s.-ӎ4Q!Nd;5Nm ~wֱ¯uO^l֚ڼ(7wUT Ih{Q_8N4kwKnߜK#RrǪm h,R QQ )qeUX+ y=?~HxpV܃p/zY4b̻?/Wz|vW% 4S罓(yow,5C_@-W*YM{SҐo^]f k&6}/>riX|yhua_<}24 n?5k~:?鏆[΢;snXN VS״KQĸ{,ֈ:͓r K{dބP1G10R'iHU'Qh 4^ƴ֕7e ioot껉@K'(t:ݹ,9(Xbw6T7uD7uB65-VW"nnYOhJAK|\]յv*@-sim[=/zԧ(sh VͦR!FZREb4a;=LRAeȿ]o)Hyoބ9>-"w)\oA^]վFpqF%+u8?/[ y|L£.ϮJMO_&DrR-!R6"J KmXp B!?0.HK֢v(᳙j:g [ [leif牿W,m+ӱ܊vׅףumm6SBp.n\VYSn?qٱk3>wgkUA8w +.ki=LN/~l+wd6~[~(,3, *]M i^/a\m$>gG]3E:;k=!HIft_}nI-ګvUfGvS??{ʡCL&hv"&QAX{њrsy[ d:fܝ(.X7Q?go:o{~wf<j_^wxpʎnl,=hyχt+kٽ:p43wBǺP֖_^t!9ctrt?߶oE#2=FXc;{.o/oݺğ/4ighz('2B7 AG7a*#- H]7róĄ,oou[2>Jj±O d$Da䧞G(OZ2?ȯ%(ԔRkv&[rS{ʳq3DFdBK}C(O:h!8@֜{BLJj'7>{-bFh:æq;Z |1j@rdht1mȐ$37/ N w4z ʠݔ)  ̇w[T\o21%dSF9_2ZMי;IuFY(QXw;Ny`[iOwkMY:&Aq62X @5,!HQI9r59b.|:rRn=񷷻ѭ b5ghtBؠi 1Q_p) 2BQH-L4H{:m 2Pvx"٭f5^춪& q)tɳ$ZЖ Sx#g/~ͱJOk%ndLK.(oU;;))^bȑޤb:Ve<B 6lhnd19]u?Q|9auDz"tt<{ܕv!U3*胿f`4OJNqYN/4476gr:oFOVz,޼^X$++Fo?d+.ns;ٝi]f T٘Vgl'9sDG8D0eSUdG l;[1:[[w,E^5r#l3p0 wl&x`w "$JfDFߌicv }}$Uz)ec1LOU`` %0*'*A+ƃ?"E,I7wJaH"iN%=p2my̖*pwU՗GuA|JniXB<.(e}ml>[{-oIҊfi>r0:)AO2R'M@O/l|ߡ""eknQx)s^&QЖȞ9%ЩK+s" n>.W;*vLyA@;vuWYk]O: >  $$dEEEcǎMNN((932 qN`JE(jF貒ʉDljTzZFX،I[I_eV(fzD0 ;Gfk݄pnHLJ#[$Q*)CĐ` ReY׉)3ĸRU!.یq뭕Q%ɬMUc0[i.x@ *B a"w%0`>FąJH+VU=zHvy/APB2& f7ݚZL,Hky6FkcޠV;gI ?ecY 2_KB re9x^/#C4R5:{,fs'$sK㲺ڏU z82D<6W}%jkhl}`aR|roG~yb燏Xl'p- 3ysє! >TUZ ⁀|pD]Q> 2a(?LJc1P:caE&XJ$z<H;\d7_)T83Oҍ # aG {܀Q# ]7QW|)Ƙ.Z.Yhŀ)sf.]]f%8ҩCD $o.dѢ4Vf-0`5b$axNJ yE!e~r7ώҒUVc੻~DEITj(YSfZL@'G֮~_D$g11њ|] "J\u(QƯY9ƨ \A _{hȸ ~zj'Q%Omٶ4&*v9ekl\ѣG 3E.5rYg⊜^,9궭^ؽeyMՖ\|gwƟ:g |g狟$Ak5:EOl [a<0dEss\ H$z;xHpU?e`2 g8pK$LMf+4 *Cߟ¸MMD# b!p{߲V ly=]V>ho֫kq9"n2 S[4pР>EŲœ룆k%TEūA!:cQ2A >OBB##t*bDE(HUG ,(X P0 62L6j%\OR"\2$(ѠԆ&Fb0F& ycV R" œԑ]O(%2*,>q@%RjX$>hȨ)ÌrX$ ␘Ƀk`}p!8"^ڰqFũϸpX4[VH4Hf<~RJN.ת/@K?.)2,H9qgœi#Btjed>ڨcT QEJ|BH6(^/㞘&4PHB"$pB}X\#է,2+GML0j(5CN<*DVqᑱI q\T;/|p'Uj`0E%4f\(" _, 0ĦN 44bD(f|bcPXC1+&r/ܔTwfs\y!|2Q$Y Қ\!Nu `=r<얆%C4m5/o&۩>LvMw-]4輌T 1e5:zDӛf]-Ķ ` :Y%=ra lw}^$Hf|co#271B aj&L:͌20@w Ă -#d^xptUuAS!}q=gv7l`;)6Q eɖ-Y.Krq{s7%v]8}*V%J$Fh l}wIDYM\>3:OM=إ͵wO>xb!$Ià jד*]mL^ș*9!/@V;?} 3G@ʺ,:gUB717K}߳B鄸ZNcO=%qX@#'|dt_ɢ4) \+G I/L/lX/k(G,h4 Zػ`!F='Bh~k ^ tY/kG;2]:k:L,@{;O3y˻ei7w?.x[縮{D2NC Ry uݽ4K{"u~}Gq< O;yc.X˖Vbj֦붪G`{п5Ʈ(b~={PT۟4Ry}Lc_ ~ByǦXk捚o-蚻n]Μ&wx'`kܸs>tĩOu;7{Cݟ5>h$?[;U;wm}$eB}v1l}6jftxgl!nMm9`Ov`S\}DT]0`"-k`<{o}N2W/@0&xiMR%iX5Fq*t3>4y%J ~ot9&pPԥSKIgg32Bz7ZNzxn7rBb 8=6rU|zhv/I5>8RD<.H*3W ~}()]-"y4ӥ虣Ϗ4_~eh|>{z,Tq'/_Nq&)cttx%CwrB,M>;&[-"=p$0˝!;|ShE7p*2$@0sPa;}/A/)l,rГѶZY0C8 P6Q9?_sBytVeϡ8Rwp8簱^R?6: Hb9E3GtjBi#ȟ ?e u@e2@܇FQ!kmݒc}d}LjoF/<$YV_E`^%B^ +uEV =I0ZjZ5{r_z?a\8p/Y貈!0oJ!;}O&,7|`z|fv6[HO'7O[S}opz=p8#'i,{mqW?T:W-@ B<>?VvcO<9E7p{P go&7.O n; aX{F#V eJG}[/ٌy˷Eu׷~ {t<KWi[uŝ;wiS','/{#; x󆵆yst2̈́Fr]DH}CEQ[)[ݽw}s+6|?|`0SǶګE?AG:&NNOC>L##eV[u{\CGK\V5+kx|nl$L/tXWZ׆}%xazA $~OC:Nh"?qbCe|\v5@衦J6W3Xf1)8L럠HjƼ$RP^/v_vgXdgk"yG\B^Cr$Gw {PrAБՐ:: $@x(Ӓ+7-Dwtx8 āq@9P j!-pM^ݤ ģY*&geYcnԽ{X"Uwmi3ֶm +.-jzUxJ 'JW6Q*MmGFvj(5\KFoł2B8T"D,˷ d%S]`2қ7ժ'1Hum|DxB^-VB%G`"`LTڜ3'd&.' kl\W`r6]UE\ܼ!rΎZuߙ\9i{ \Ĝ*[Tul^gɥTT%][ڒB:4ڡ$JR0oZ2*6BDdy&c'eIRԐ~Bd߉׊m6$`EDUD !K.cj%p,EN_;0\"(H'&5@?jxcFEqT. ^us{lN,\_wo.3Zs>}o?$K'4O\\.EuOEJ{SDMƟ?_xYUB,GmUC}/|4n{Eؗ٫pڂITCtsk>yz楗?x+9>xbs,- Oj[__ov9 'u$䙞/|K¹}1X4h ȌH%Pj4bPLh Um2)"Ij1ﬤBidBTkuVr~Wʶv^IfDS MŮl8^&85x#aU Kխ˔DHFlnJ!߰/ jcYNk`/reCEKxj"b"Uߌy~yt/79uN'sWZU$ɶ:5PGVJ6:?>2b6W}<뛚ͮ*3c6u[isq+bh|d64WxEɩ<[Ui_qЩ,$Q]J{$wЙ4w9o6sJ'N̥^61QiSQ @SCPz/JWK gGL@߰r6+ )Z[8ɩkZ:]:@̇g|h!ɼ޵աMZKi2ȴsUMlXɂ%)`mwK 1dѩY:+.^v0?ZkRhh MLn6.5g5]ZT K]\bx3h*̔XZ8 @jQH봐\@P^6qB z h^';d4RB3pкZRh|"al& u{bȻKХ4+K(.5PJI( Q̥5@]y(2o!>HVl-Ҡ'YDݠZ/pHő/.D$ <aPSe[o}r Uo\W/e"Iǚ :RmX5Q7쁾séSX|cRjjPF{J25ܰ1Ɵ|1SW_b%z_~ ukWdG+{֘F'9LG*C>{}U O-RkOmwnҚ5ҏ4 - ӊ[$Dd-κKc$gue\W &aϤ|ݷP!AU鋿[>x?wnxyhiV!sSPg2BT-uPT;o aGwBP܀ B %<( bJxP( 2P(e(AP(PƒBP(BP,C  BX B %<g:^m)Z! lvK+X/,3@Hz/KE%5?Jx}O2 /u|t|eB˹{.>˾vRsN /#3eߟ:o!"p{O-D}:=590>6266CB욓_xg4a_ݛkX!o!`R3ZRQWWcw=@O#yjn|gܾH5{`Ʊq&繉D4,{iI$/^j5eJf5EWW4l͵-k^nn7R|&53=Oeep$kkj4Cnn{l5mEǃر5 ʺ޻j/zsuEYgpQ?5>/ w7W<Ϲ3yv|r]-aPӪ;-`&= "^\r:CpZuf-H9^}W&6ls9}]G ER@a?W>e/M=?#Syz.syno"5Z(E&/mrh萿BMLa؁A1-[0ାv&Ͷ:tFPZjh0Y*WoD+˓Ǟ}5-wUK=~NS~lPٱzNböwUa ϟ]MmnZ292<2sۆ.= qTlܳE<=rEꙃHuU|wןuXb>?[k&X.'=8˥l(gƺOՖV9t/ Hmf l&cXs>50-[r'Ab|;>]٘;Kth VжD'ƒw7Q}b匐 xӱBAm*3,ѸqK/3g}H*_$W.zҜֵfuuϩ;j ũ|(&I;?$z׵nE޳۲ lV5@ddd>SVx9NvY~}0 }sb:[HeÁ0 fb7HD$@N-UÚRʺRNΏ>pr=97=8 DÞ޳߼8^W M\u4 K\̠Q%#yZȐ?Qizh*4foT[l[W(Fcu)S9NS AZdz/&Ȳ(^ePUf'#s lkza#?-S8VvmTWePUfBSCef1ha0Ѣ"-zUW?M=FfKk~|1 gc} F~'#f&:h!QB2m=;?M&+*AuV݌uiZZNL\|K8VF ^/FY+1_4eQ]."Re)OF.%Yev/GƦiD1ʠ3tnaQ-U6]=;xMj6ըKHp x9C,aˡtQiz:.:k#gr7bj Rj7bU#a7ْݾT3 f(fT'2Ɂ)ebl8 #6x^"tv66HdJ6WUF5V^,99]ԛcŗZj[u[@%A\UQos[Qn]u<̛jsӴX_jO&#tL͍+Y V']Zc&(Bpպ4xb=FW7טջ66# +-l7Y\9wB(S[ܺ{6YiT|E{45dM*1癜 u/yLVJQT5ZoPu[<s^ʱ@xKնV\}j 8e@έ[ks r+i\Y'/|e̮6SOV_X}i:`HںՔܳu-972=B.<=Դo*O,k7^`N+++6Uzդoq&fɆ:6|Md3 }.$4}mkZ8uxV*֊QooB1xNJaM2Qu2&&'#s-ܱN&>BˤcݦUOjvy#k[/g:vz_+Sj[=bٻwS"|vz1s$է~Kj]FlVS8 wS G m7tKUz;Ԭ<}Oqg=ŨGVHWlZ4?vxM\DTGޡ8?{~N[ =8{G@%R.>m몥=rSGSMb*-՚u+:3"Ir:Qۄh N1ζK[5:>" O_:t @uk fѳg򣗎׮oV[WL{$ 뚢b:/1=ܺ'm֙ܵSbT}D`f;yV[-o}j%I:y _҇pnPL'\ FNNӅHi {[îO#Lm֓Ŕ~gI.J%ҪrPGt*[{[t98t4i` )+rs>\jok4WJUb.LQ`t(``1r)ųkuzVN' Z5sIFF$ ` v3+¡*YOVX<'jMWD xLŐ_-H|&I.U}h^b$ɀPBKD%-B*\VYb|&pBcP1d,]Z.Gdr*NWD xKS e(dx(QSkn*X@WOI)ˉ` Rm`tp!Q," 'F4z UL'20j^pP>]#C0U ,@K40W(5VQP[kt15ʹx 91eQͪVb)RR[TFJ`Em+H0R-27|Y![ 'rz)I8d9jb6yVoN&^Msqa :ɔ>᳣c$eU&BX\gy>*BP(~dYN Ϸz}vf:bTP(Q,E#h~dfsRP(0 C,ǩy;=T!95W(ۇP(e(AP(PƒBP(BP,f!I'_( #"T0kN`2l&S"BP|$ ;fdsBBHҹoBps 4Mu7W;t&KH$Lg(2( B @2,BCa0 C!.NJzhja劔t XE0dmR( Ňe1c p p#ĻfMcFQ8M,pŒ, RwP([0" ef($";xa.$д犥,4M jR([B1$y򼊥i pw~ {=bbuZh*J .O  BqKAc$I  2 A8. 0R> startxref 55985 %%EOF Phishing attack with subject: “Re-Validate” « Informasietegnologie
Language:
SEARCH
  • Recent Posts

  • Categories

  • Archives

Phishing attack with subject: “Re-Validate”

With the graduation just around the corner and most students already on holiday, and many of our colleagues already taking a well-deserved break, and collectively we all tend to be a little less vigilant.

The end of the year vacation period is generally a time when phishing attacks on our email accounts drop, and it is speculated that the phishers know there are significantly fewer employees working during the holidays, so there are fewer opportunities for targeted users to actually open malicious attachments.

However spear-phishing attacks increase when the Information technology and “cyber-security”  centres of large enterprises like the university security operations are lightly staffed or understaffed. The scammers know that there is a greater chance for them to gain access to accounts via spear-phishing as the “watchdogs” are fewer.

What is spear-phishing?

Spear-phishing is a targeted form of phishing in which fraudulent emails are sent to specific individuals at an institution like the university in an effort to gain access to confidential information. Often a trustworthy entity is impersonated that uses “urgent” language to requesting sensitive information or actions.

[In August this year the MacEwan University in Canada was targeted when a series of fraudulent emails convinced MacEwan University staff to change electronic banking information for one of the university’s major vendors, resulting in $11.8 million being transferred to criminals.]

The following spear-phishing e-mail is appearing in some student and personnel accounts and it seems to be targeting university accounts specifically as the salutation is a personal name: (in this case your e-mail address, or in some cases your display name in e-mail e.g Wiles, David <dw@sun.ac.za>

The mail will look like this:

~~~

From: Zimbra <infog@adm.orel.ru>
Sent: 01 December 2017 22:15
To: Your Own name <your-e-mail@sun.ac.za>
Subject: Re-Validate

 
Dear your-e-mail@sun.ac.za , 
Your account has exceeded it quota limit as set by Administrator, and you may not be able to send or receive new mails until you Re-Validate your your-e-mail@sun.ac.za account. 
To Re-Validate account@sun.ac.za account, Please CLICK: Re-Validate your-e-mail@sun.ac.za Account
 
~~~
 
If you click on the link you will be taken to a website that will show the following login window where you will be asked to fill in your personal details and password. Once this happen the spear-phishers will have gained control over your email account and will proceed to locate more sensitive information like other e-mail addresses and bank account details, for example. Your e-mail account will then be used to attack other university accounts.


Please be aware of this spear-phishing scam. No university department or division will ever ask you for passwords via e-mail.

[ARTICLE BY DAVID WILES]

Tags:

Comments are closed.

 

© 2013-2024 Disclaimer: The views and opinions expressed in this page are strictly those of the page author(s) and content contributor(s). The contents of this page have not been reviewed or approved by Stellenbosch University.