%PDF-1.3 1 0 obj << /Type /Catalog /Outlines 2 0 R /Pages 3 0 R >> endobj 2 0 obj << /Type /Outlines /Count 0 >> endobj 3 0 obj << /Type /Pages /Kids [6 0 R ] /Count 1 /Resources << /ProcSet 4 0 R /Font << /F1 8 0 R /F2 9 0 R /F3 10 0 R /F4 11 0 R >> >> /MediaBox [0.000 0.000 612.000 792.000] >> endobj 4 0 obj [/PDF /Text ] endobj 5 0 obj << /Creator (DOMPDF) /CreationDate (D:20250719005609+00'00') /ModDate (D:20250719005609+00'00') /Title (Report 07-2025) >> endobj 6 0 obj << /Type /Page /Parent 3 0 R /Annots [ 12 0 R 14 0 R 16 0 R 18 0 R ] /Contents 7 0 R >> endobj 7 0 obj << /Length 4030 >> stream 0.702 0.800 0.816 rg 34.016 34.016 543.969 723.969 re f 1.000 1.000 1.000 rg 45.266 317.192 521.469 429.542 re f 0.773 0.773 0.773 RG 0.75 w 0 J [ ] 0 d 45.641 317.567 520.719 428.792 re S 0.773 0.773 0.773 rg 61.016 332.942 m 550.984 332.942 l 550.984 333.692 l 61.016 333.692 l f 0.200 0.200 0.200 rg BT 61.016 693.716 Td /F1 14.4 Tf [(“PLEASE SUPPORT STIAS…” EMAIL CAUSES A MAIL STORM)] TJ ET 0.400 0.400 0.400 rg BT 61.016 664.909 Td /F2 9.0 Tf [(Posted on )] TJ ET BT 104.045 664.909 Td /F3 9.0 Tf [(January 01,1970)] TJ ET BT 173.588 664.909 Td /F2 9.0 Tf [( by )] TJ ET BT 188.096 664.909 Td /F3 9.0 Tf [(David Wiles)] TJ ET 0.153 0.153 0.153 rg BT 61.016 637.420 Td /F4 9.0 Tf [(There is no reason to be worried or concerned about a mail that is being circulated with the subject line starting with )] TJ ET BT 61.016 626.431 Td /F4 9.0 Tf [("PLEASE SUPPORT STIAS...")] TJ ET BT 61.016 606.442 Td /F4 9.0 Tf [(Although it is definitely spam)] TJ ET BT 175.064 606.442 Td /F2 9.0 Tf [( \(defined as unsolicited commercial e-mail\))] TJ ET BT 345.605 606.442 Td /F4 9.0 Tf [( it does not appear have any dangerous content )] TJ ET BT 61.016 595.453 Td /F4 9.0 Tf [(and was sent out by a university user to over 300 addresses one of which was the general IT Service Desk email address. )] TJ ET BT 61.016 584.464 Td /F4 9.0 Tf [(Because it was sent to the address which automatically logs service requests the account automatically emailed all the )] TJ ET BT 61.016 573.475 Td /F4 9.0 Tf [(recipients with "Cancellation" e-mails, who then replied, etc. This was no fault on the side of the IT Service desk as it is an )] TJ ET BT 61.016 562.486 Td /F4 9.0 Tf [(automatic process of the Jira logging software that IT uses to track its calls.)] TJ ET BT 61.016 542.497 Td /F4 9.0 Tf [(This is known as a)] TJ ET 0.373 0.169 0.255 rg BT 137.543 542.497 Td /F2 9.0 Tf [(mail storm)] TJ ET 0.373 0.169 0.255 RG 0.18 w 0 J [ ] 0 d 137.543 541.346 m 179.042 541.346 l S 0.153 0.153 0.153 rg BT 179.042 542.497 Td /F4 9.0 Tf [( in IT jargon when somebody replies to a single e-mail sent to a mailing list and inadvertently )] TJ ET BT 61.016 531.508 Td /F4 9.0 Tf [(replies with a personal message to the entire mailing list leading to a snowball effect or a )] TJ ET BT 415.670 531.508 Td /F2 9.0 Tf [(mail storm)] TJ ET BT 457.169 531.508 Td /F4 9.0 Tf [(. It is like a dog )] TJ ET BT 61.016 520.519 Td /F4 9.0 Tf [(chasing its own tail!)] TJ ET BT 61.016 500.530 Td /F4 9.0 Tf [(If you receive a mail with the subject line )] TJ ET BT 224.582 500.530 Td /F1 9.0 Tf [(")] TJ ET BT 228.848 500.530 Td /F4 9.0 Tf [(ICT-338035 FW: PLEASE SUPPORT STIAS - PLAN YOUR NEXT MEETING, )] TJ ET BT 61.016 489.541 Td /F4 9.0 Tf [(WORKSHOP AND OR CONFERENCE WITH US"  or "PLEASE SUPPORT STIAS - PLAN YOUR NEXT MEETING, )] TJ ET BT 61.016 478.552 Td /F4 9.0 Tf [(WORKSHOP AND OR CONFERENCE WITH US" just delete it. )] TJ ET BT 61.016 458.563 Td /F4 9.0 Tf [(If you want to take it further and set up a mail filter to delete all mails with that particular Subject, then you can do so. )] TJ ET BT 61.016 447.574 Td /F4 9.0 Tf [(However do not blacklist the sender or report it to the )] TJ ET 0.373 0.169 0.255 rg BT 274.613 447.574 Td /F4 9.0 Tf [(help@sun.ac.za)] TJ ET 0.18 w 0 J [ ] 0 d 274.613 446.423 m 339.278 446.423 l S 0.153 0.153 0.153 rg BT 339.278 447.574 Td /F4 9.0 Tf [( address or it will just perpetuate the spam, and you )] TJ ET BT 61.016 436.585 Td /F4 9.0 Tf [(could block legitimate e-mails from IT or the original sender.)] TJ ET BT 61.016 416.596 Td /F4 9.0 Tf [(Stay safe out there and thank you to everyone who flagged this email. It is encouraging when we have such observant )] TJ ET BT 61.016 405.607 Td /F4 9.0 Tf [(and enthusiastic users.)] TJ ET BT 432.949 385.618 Td /F4 9.0 Tf [([ARTICLE BY DAVID WILES])] TJ ET BT 61.016 365.629 Td /F4 9.0 Tf [( )] TJ ET 0.400 0.400 0.400 rg BT 61.016 347.140 Td /F2 9.0 Tf [(Posted in:E-mail,News,Security | | With 0 comments)] TJ ET endstream endobj 8 0 obj << /Type /Font /Subtype /Type1 /Name /F1 /BaseFont /Helvetica-Bold /Encoding /WinAnsiEncoding >> endobj 9 0 obj << /Type /Font /Subtype /Type1 /Name /F2 /BaseFont /Helvetica-Oblique /Encoding /WinAnsiEncoding >> endobj 10 0 obj << /Type /Font /Subtype /Type1 /Name /F3 /BaseFont /Helvetica-BoldOblique /Encoding /WinAnsiEncoding >> endobj 11 0 obj << /Type /Font /Subtype /Type1 /Name /F4 /BaseFont /Helvetica /Encoding /WinAnsiEncoding >> endobj 12 0 obj << /Type /Annot /Subtype /Link /A 13 0 R /Border [0 0 0] /H /I /Rect [ 135.0407 541.6642 137.5427 550.8217 ] >> endobj 13 0 obj << /Type /Action /S /URI /URI (https://en.wikipedia.org/wiki/Email_storm) >> endobj 14 0 obj << /Type /Annot /Subtype /Link /A 15 0 R /Border [0 0 0] /H /I /Rect [ 137.5427 551.2879 137.5427 551.2879 ] >> endobj 15 0 obj << /Type /Action /S /URI /URI (https://en.wikipedia.org/wiki/Email_storm) >> endobj 16 0 obj << /Type /Annot /Subtype /Link /A 17 0 R /Border [0 0 0] /H /I /Rect [ 137.5427 541.6642 179.0417 550.8217 ] >> endobj 17 0 obj << /Type /Action /S /URI /URI (https://en.wikipedia.org/wiki/Email_storm) >> endobj 18 0 obj << /Type /Annot /Subtype /Link /A 19 0 R /Border [0 0 0] /H /I /Rect [ 274.6127 446.7412 339.2777 455.8987 ] >> endobj 19 0 obj << /Type /Action /S /URI /URI (mailto:help@sun.ac.za) >> endobj xref 0 20 0000000000 65535 f 0000000008 00000 n 0000000073 00000 n 0000000119 00000 n 0000000305 00000 n 0000000334 00000 n 0000000472 00000 n 0000000575 00000 n 0000004657 00000 n 0000004769 00000 n 0000004884 00000 n 0000005004 00000 n 0000005112 00000 n 0000005240 00000 n 0000005333 00000 n 0000005461 00000 n 0000005554 00000 n 0000005682 00000 n 0000005775 00000 n 0000005903 00000 n trailer << /Size 20 /Root 1 0 R /Info 5 0 R >> startxref 5976 %%EOF E-mail « Informasietegnologie
Language:
SEARCH
  • Recent Posts

  • Categories

  • Archives

E-mail

Remember to check your Junk Email folder

Monday, August 30th, 2021

To ensure that staff and students aren’t exposed to malicious phishing or spam emails our system administrators and security team had to enable a stricter spam filter earlier this year as added protection.

A spam filter assigns every message, received and sent, a spam confidence level based on the likelihood that the message is spam. Depending on its level an inbound message may be relayed directly to the user’s Junk Email folder. The filter looks at certain criteria contained in the email it rates, for example too many hyperlinks or a suspicious file attached. Tweaking the filter can be tricky – we don’t want you to miss important emails, but at the same time it’s our responsibility to protect you and all our staff from harmful attacks. 

For this reason, it’s important that you regularly look in your Junk Email folder in case the spam filter might have relayed it there. 

The main purpose of Microsoft Outlook’s Junk Email Filter helps is to reduce unwanted email messages in your Inbox. Junk email, also known as spam, is moved by the filter away to the Junk Email folder. This is done at an institutional level by Microsoft (as mentioned above), but you can also flag or “un”flag messages from a person or company as Junk email.

How to change your spam filter’s preferences.
How to tag an email as junk mail.
How to report spam or junk email to Microsoft. (downloadable PDF-document) 

If you have any questions, please log a request on the ICT Partner Portal.

Phishing scam: “Proof of Payment”

Friday, August 27th, 2021

Over 2 billion people worldwide have purchased goods or services online during the pandemic. The danger of all this convenient shopping with Takealot, Checkers or any online store is that people provide their credit card number without diligence.

One of the most prevalent scams NOW is called POP or Proof of Payment Receipt. There are a number of new phishing scams with the subject “Proof of Payment” or “Suspicious Bank transaction” at the moment. 

Here is one such scam that is currently being reported by personnel and students at Tygerberg. 

Click for larger image

Click for larger image

The way that this scam works is that the scammers are trying to get their victims to click on the link and go to a specially engineered site to steal passwords and login credentials. Often bank account details and cell phone numbers are asked for, and this is how the scammers get access to bank accounts and can do SIM swaps, to steal money and personal details.

Notice how the mail details have been forged to make the sender and the recipient the same. This is to disguise the true sender and to bypass the mail filters which would normally accept mail from within an organisation. In this case this sender used a “throw-away” Outlook.com e-mail address and then forged the headers to change the sender. In this case there is a possibility that the government address has been compromised.

If you get one of these e-mails or one similar looking (scammers change tactics very quickly) please report it to IT on the ICT Partner Portal. Fill in your information and add the email as an attachment. Your request will automatically be logged on the system.​​

Secondly blacklist the sender under Junk mail, and perhaps even block the entire domain. You can do this by using the Report Message add-in on Outlook (available on your toolbar on the far right) More about the add-in on our blog or you can find the instructions on this .PDF

 

[ARTICLE BY DAVID WILES]

Careful of Reply All

Tuesday, March 2nd, 2021

Last month some university staff’s mailboxes were flooded with an email advertising services in what we call an email storm. Apart from being disruptive, these emails weren’t harmful, but we would like to remind you of a five important things to keep in mind before you send email to large groups:

1. ALWAYS use the BCC field, NOT the CC field.
If you use the BCC field instead of the CC field the Reply All option is disabled. Therefore recipients won’t be able to Reply All and cause a flood of inconvenient emails.

2. DO NOT Reply All when you receive an email sent to multiple people.
If you receive an email that has been sent to a large number of people, please by default don’t Reply All. You will only be causing an unnecessary surge of emails and annoy your colleagues. If you need to comment only email the sender or the relevant people.

3. Advertising services or products on the SU network is not allowed.
No staff or student member is allowed to advertise any services on the SU network. This is stipulated in the Electronic Communications Policy which staff and students agree to when reactivating their network access every year.

4. If you need to send official mass communication, consult the Digital Communications Office.
The Digital Communications Office, a division of Corporate Communications, are responsible for campus-wide electronic communication. They use specific platforms to distribute information and will be able to advise you on the most efficient way of sending out your email.

5. Use SYMPA
If you regularly need to send out emails, you can use the SYMPA mailing solution. More information on SYMPA.

 

Change your password online

Thursday, February 25th, 2021

In the past, the IT Service Desk was your first stop when you forgot your password (we know, it happens to us too!) or had to change your password. Unfortunately, due to various security risks, as well as the very strict new data protection acts, the Service Desk is no longer allowed to change or reset your password for you. (You can read more about the university’s own Data Privacy Regulation here)

We would like to encourage staff and students to use the Password Selfhelp website in future. We realise that this might be inconvenient, but for your and our own protection, we will have to follow this procedure. 

 The Password Selfhelp website (www.sun.ac.za/password) offers two options: 

  1. Change Password for users who know what their password is and want to change it. 
  2. Reset Password for users who forgot their password. 

To use the online Password Selfhelp, your cellphone number or an alternative email address has to be on the HR records, otherwise, you will not be able to change your password. You can update this information by logging onto SUN-e-HR though the staff portal,  http://my.sun.ac.za or contacting your department’s HR contact person. 

Select the My Profile link – Personal Information

Log on to SUN-e-HR.

Select Basic Details – Update, Other, Personal Email Address 

or

Select  Phone Numbers – Update

During the password change process a PIN code, consisting of 8 numbers, will be SMSed or emailed to the user (depending on which option he/she selected) Please use this PIN to change your password on the self help website. As soon as the password has been changed, the user will be notified by means of SMS or email.

If you have not requested a password change, please notify the IT Service Desk immediately at 808 4367.

IMPORTANT!

If you are working from home you will also need to follow these instructions after you’ve changed your password to ensure that it sync properly across devices and accounts.

“PLEASE SUPPORT STIAS…” email causes a mail storm

Friday, February 19th, 2021

There is no reason to be worried or concerned about a mail that is being circulated with the subject line starting with “PLEASE SUPPORT STIAS…”

Although it is definitely spam (defined as unsolicited commercial e-mail) it does not appear have any dangerous content and was sent out by a university user to over 300 addresses one of which was the general IT Service Desk email address. Because it was sent to the address which automatically logs service requests the account automatically emailed all the recipients with “Cancellation” e-mails, who then replied, etc. This was no fault on the side of the IT Service desk as it is an automatic process of the Jira logging software that IT uses to track its calls.

This is known as a mail storm in IT jargon when somebody replies to a single e-mail sent to a mailing list and inadvertently replies with a personal message to the entire mailing list leading to a snowball effect or a mail storm. It is like a dog chasing its own tail!

If you receive a mail with the subject line ICT-338035 FW: PLEASE SUPPORT STIAS – PLAN YOUR NEXT MEETING, WORKSHOP AND OR CONFERENCE WITH US”  or “PLEASE SUPPORT STIAS – PLAN YOUR NEXT MEETING, WORKSHOP AND OR CONFERENCE WITH US” just delete it. 

If you want to take it further and set up a mail filter to delete all mails with that particular Subject, then you can do so. However do not blacklist the sender or report it to the help@sun.ac.za address or it will just perpetuate the spam, and you could block legitimate e-mails from IT or the original sender.

Stay safe out there and thank you to everyone who flagged this email. It is encouraging when we have such observant and enthusiastic users.

[ARTICLE BY DAVID WILES]

 

 

© 2013-2025 Disclaimer: The views and opinions expressed in this page are strictly those of the page author(s) and content contributor(s). The contents of this page have not been reviewed or approved by Stellenbosch University.