%PDF-1.3 1 0 obj << /Type /Catalog /Outlines 2 0 R /Pages 3 0 R >> endobj 2 0 obj << /Type /Outlines /Count 0 >> endobj 3 0 obj << /Type /Pages /Kids [6 0 R ] /Count 1 /Resources << /ProcSet 4 0 R /Font << /F1 8 0 R /F2 9 0 R /F3 10 0 R /F4 11 0 R >> >> /MediaBox [0.000 0.000 612.000 792.000] >> endobj 4 0 obj [/PDF /Text ] endobj 5 0 obj << /Creator (DOMPDF) /CreationDate (D:20250719074259+00'00') /ModDate (D:20250719074259+00'00') /Title (Report 07-2025) >> endobj 6 0 obj << /Type /Page /Parent 3 0 R /Annots [ 12 0 R 14 0 R 16 0 R 18 0 R ] /Contents 7 0 R >> endobj 7 0 obj << /Length 4030 >> stream 0.702 0.800 0.816 rg 34.016 34.016 543.969 723.969 re f 1.000 1.000 1.000 rg 45.266 317.192 521.469 429.542 re f 0.773 0.773 0.773 RG 0.75 w 0 J [ ] 0 d 45.641 317.567 520.719 428.792 re S 0.773 0.773 0.773 rg 61.016 332.942 m 550.984 332.942 l 550.984 333.692 l 61.016 333.692 l f 0.200 0.200 0.200 rg BT 61.016 693.716 Td /F1 14.4 Tf [(PLEASE SUPPORT STIAS EMAIL CAUSES A MAIL STORM)] TJ ET 0.400 0.400 0.400 rg BT 61.016 664.909 Td /F2 9.0 Tf [(Posted on )] TJ ET BT 104.045 664.909 Td /F3 9.0 Tf [(January 01,1970)] TJ ET BT 173.588 664.909 Td /F2 9.0 Tf [( by )] TJ ET BT 188.096 664.909 Td /F3 9.0 Tf [(David Wiles)] TJ ET 0.153 0.153 0.153 rg BT 61.016 637.420 Td /F4 9.0 Tf [(There is no reason to be worried or concerned about a mail that is being circulated with the subject line starting with )] TJ ET BT 61.016 626.431 Td /F4 9.0 Tf [("PLEASE SUPPORT STIAS...")] TJ ET BT 61.016 606.442 Td /F4 9.0 Tf [(Although it is definitely spam)] TJ ET BT 175.064 606.442 Td /F2 9.0 Tf [(\(defined as unsolicited commercial e-mail\))] TJ ET BT 345.605 606.442 Td /F4 9.0 Tf [( it does not appear have any dangerous content )] TJ ET BT 61.016 595.453 Td /F4 9.0 Tf [(and was sent out by a university user to over 300 addresses one of which was the general IT Service Desk email address. )] TJ ET BT 61.016 584.464 Td /F4 9.0 Tf [(Because it was sent to the address which automatically logs service requests the account automatically emailed all the )] TJ ET BT 61.016 573.475 Td /F4 9.0 Tf [(recipients with "Cancellation" e-mails, who then replied, etc. This was no fault on the side of the IT Service desk as it is an )] TJ ET BT 61.016 562.486 Td /F4 9.0 Tf [(automatic process of the Jira logging software that IT uses to track its calls.)] TJ ET BT 61.016 542.497 Td /F4 9.0 Tf [(This is known as a)] TJ ET 0.373 0.169 0.255 rg BT 137.543 542.497 Td /F2 9.0 Tf [(mail storm)] TJ ET 0.373 0.169 0.255 RG 0.18 w 0 J [ ] 0 d 137.543 541.346 m 179.042 541.346 l S 0.153 0.153 0.153 rg BT 179.042 542.497 Td /F4 9.0 Tf [( in IT jargon when somebody replies to a single e-mail sent to a mailing list and inadvertently )] TJ ET BT 61.016 531.508 Td /F4 9.0 Tf [(replies with a personal message to the entire mailing list leading to a snowball effect or a )] TJ ET BT 415.670 531.508 Td /F2 9.0 Tf [(mail storm)] TJ ET BT 457.169 531.508 Td /F4 9.0 Tf [(. It is like a dog )] TJ ET BT 61.016 520.519 Td /F4 9.0 Tf [(chasing its own tail!)] TJ ET BT 61.016 500.530 Td /F4 9.0 Tf [(If you receive a mail with the subject line )] TJ ET BT 224.582 500.530 Td /F1 9.0 Tf [(")] TJ ET BT 228.848 500.530 Td /F4 9.0 Tf [(ICT-338035 FW: PLEASE SUPPORT STIAS - PLAN YOUR NEXT MEETING, )] TJ ET BT 61.016 489.541 Td /F4 9.0 Tf [(WORKSHOP AND OR CONFERENCE WITH US"or"PLEASE SUPPORT STIAS - PLAN YOUR NEXT MEETING, )] TJ ET BT 61.016 478.552 Td /F4 9.0 Tf [(WORKSHOP AND OR CONFERENCE WITH US" just delete it.)] TJ ET BT 61.016 458.563 Td /F4 9.0 Tf [(If you want to take it further and set up a mail filter to delete all mails with that particular Subject, then you can do so.)] TJ ET BT 61.016 447.574 Td /F4 9.0 Tf [(However do not blacklist the sender or report it to the )] TJ ET 0.373 0.169 0.255 rg BT 274.613 447.574 Td /F4 9.0 Tf [(help@sun.ac.za)] TJ ET 0.18 w 0 J [ ] 0 d 274.613 446.423 m 339.278 446.423 l S 0.153 0.153 0.153 rg BT 339.278 447.574 Td /F4 9.0 Tf [( address or it will just perpetuate the spam, and you )] TJ ET BT 61.016 436.585 Td /F4 9.0 Tf [(could block legitimate e-mails from IT or the original sender.)] TJ ET BT 61.016 416.596 Td /F4 9.0 Tf [(Stay safe out there and thank you to everyone who flagged this email. It is encouraging when we have such observant )] TJ ET BT 61.016 405.607 Td /F4 9.0 Tf [(and enthusiastic users.)] TJ ET BT 432.949 385.618 Td /F4 9.0 Tf [([ARTICLE BY DAVID WILES])] TJ ET BT 61.016 365.629 Td /F4 9.0 Tf [()] TJ ET 0.400 0.400 0.400 rg BT 61.016 347.140 Td /F2 9.0 Tf [(Posted in:E-mail,News,Security | | With 0 comments)] TJ ET endstream endobj 8 0 obj << /Type /Font /Subtype /Type1 /Name /F1 /BaseFont /Helvetica-Bold /Encoding /WinAnsiEncoding >> endobj 9 0 obj << /Type /Font /Subtype /Type1 /Name /F2 /BaseFont /Helvetica-Oblique /Encoding /WinAnsiEncoding >> endobj 10 0 obj << /Type /Font /Subtype /Type1 /Name /F3 /BaseFont /Helvetica-BoldOblique /Encoding /WinAnsiEncoding >> endobj 11 0 obj << /Type /Font /Subtype /Type1 /Name /F4 /BaseFont /Helvetica /Encoding /WinAnsiEncoding >> endobj 12 0 obj << /Type /Annot /Subtype /Link /A 13 0 R /Border [0 0 0] /H /I /Rect [ 135.0407 541.6642 137.5427 550.8217 ] >> endobj 13 0 obj << /Type /Action /S /URI /URI (https://en.wikipedia.org/wiki/Email_storm) >> endobj 14 0 obj << /Type /Annot /Subtype /Link /A 15 0 R /Border [0 0 0] /H /I /Rect [ 137.5427 551.2879 137.5427 551.2879 ] >> endobj 15 0 obj << /Type /Action /S /URI /URI (https://en.wikipedia.org/wiki/Email_storm) >> endobj 16 0 obj << /Type /Annot /Subtype /Link /A 17 0 R /Border [0 0 0] /H /I /Rect [ 137.5427 541.6642 179.0417 550.8217 ] >> endobj 17 0 obj << /Type /Action /S /URI /URI (https://en.wikipedia.org/wiki/Email_storm) >> endobj 18 0 obj << /Type /Annot /Subtype /Link /A 19 0 R /Border [0 0 0] /H /I /Rect [ 274.6127 446.7412 339.2777 455.8987 ] >> endobj 19 0 obj << /Type /Action /S /URI /URI (mailto:help@sun.ac.za) >> endobj xref 0 20 0000000000 65535 f 0000000008 00000 n 0000000073 00000 n 0000000119 00000 n 0000000305 00000 n 0000000334 00000 n 0000000472 00000 n 0000000575 00000 n 0000004657 00000 n 0000004769 00000 n 0000004884 00000 n 0000005004 00000 n 0000005112 00000 n 0000005240 00000 n 0000005333 00000 n 0000005461 00000 n 0000005554 00000 n 0000005682 00000 n 0000005775 00000 n 0000005903 00000 n trailer << /Size 20 /Root 1 0 R /Info 5 0 R >> startxref 5976 %%EOF E-mail « Informasietegnologie
Language:
SEARCH
  • Recent Posts

  • Categories

  • Archives

E-mail

Reactivate your username before 1 April

Monday, February 8th, 2021

Network access (usernames) for staff will expire at the end of March unless you reactivate your username.

We suggest that you reactivate yours as soon as possible to ensure uninterrupted access to IT services (internet, email, SUN-e-HR etc.). Keep in mind that the cost centre manager still has to approve your request before your username is reactivated; allow sufficient time for this to be done to avoid disruption of your service.

You will receive an email from helpinfo@sun.ac.za indicating that your username (“engagement”) will expire soon. Three notifications will be sent before the end of March. Alternatively, you can go directly to the reactivation page.

Once logged into the reactivation page, you can select the services you want to reactivate.  You are encouraged to read the ECP (Electronic Communication Policy) before reactivating.

Choose the services (network / email usernames and internet usernames) you want to register for (see images below).

 

Reactivation of internet usernames is no longer necessary and can be ignored.

Make sure you select the correct cost points and if you’re unsure ask your cost centre manager. Click Accept and Reactivate.

 You will receive a notification stating that your request has been submitted, as well as a confirmation email. 

The webpage will indicate that it will be activated as soon as it has been approved by the cost centre manager. When the cost centre manager approves the reactivation request access will be extended to the end of March next year.

If you have completed these steps successfully and still receive emails from helpinfo@sun.ac.za urging you to reactivate, please go back to the reactivation page and make sure the appropriate boxes are checked: Your Network / Email usernames Your Internet usernames

 If you are still not able to reactivate, please raise a request at servicedesk.sun.ac.za

Warning: Sextortion scam

Monday, February 1st, 2021
There is a “sextortion” email making the rounds at the moment and with many personnel and students still working andstudying from home, many are concerned about the risks.
 
“The device has been successfully hacked” is a new ‘sextortion’ email scam for 2021. This email scam, like most sextortion scams, relies on “social engineering”, a process through which the scammers induce shame, panic or guilt. The scammers (the authors of the email) claim that they obtained material compromising the user (because of a computer hack, email account hack, router hack, etc) and threaten to publish it if the ransom is not paid. None these claims are true in any way; they are just deception.
 
The “The device has been successfully hacked” email message says that someone successfully hacked the recipient’s device and monitored it for a long time. The hacker claims that this was made possible by a virus installed on the device when the user visited the adult site. Using this virus, the hacker was able to record a video that compromises the user, and gained access to the user’s personal contacts, instant messengers, and social networks. If the recipient pays $1300 in Bitcoin, the hacker promises to delete all the data. Next, the scam email contains the bitcoin address to which the ransom should be transferred. This email is just a sextortion scam, and all the statements are fake. 
 
What to do when you receive the “The device has been successfully hacked” SCAM:

  • Do not panic.
  • Do not pay a ransom.
  • If there’s a link in the scam email, do not click it, otherwise you might unwittingly install malware or ransomware on your computer.
The mail will come from several e-mail addresses, which might very from user to user. Scammers use thousands of “throw-away” e-mail addresses to send out these scams.
 
If you do get such an e-mail use one of the two methods below to report it to IT Cyber Security as soon as possible. This way IT can filter and block the senders

By reporting it on the ICT Partner Portal.​​

Go to https://servicedesk.sun.ac.za/jira/servicedesk/customer/portal/6/create/115. 

Fill in your information and add the email as an attachment. Your request will automatically be logged on the system.​​

If you have accidentally responded to the phisher and already provided them with your personal details, it is vitally important that you immediately go to the USERADM page (either http://www.sun.ac.za/password or www.sun.ac.za/useradm and change your password immediately.)

Make sure the new password is completely different and is a strong password that will not be easily guessed, as well as changing the passwords on your social media and private e-mail accounts, especially if you use the same passwords on these accounts. Contact the IT HelpDesk if you are still unsure.

[ARTICLE BY DAVID WILES]

Phasing out of generic IT email addresses

Wednesday, October 7th, 2020

Until now we have used a selection of generic email addresses for enquiries from staff and students. In previous years these mailboxes were attended to manually, but in recent years, with the implementation of the ICT Partner Portal, they have been set up to automatically log a request.

For example, if you emailed quote@sun.ac.za to enquire about hardware components, your email would automatically log a request for information on your name on our platform. Likewise, if you emailed help@sun.ac.za to contact the IT Service Desk, it would log a request on your name. 

However, soon this will no longer be the case. These generic addresses will be phased out gradually and the only way of requesting a service or information will be to log a request on the ICT Partner Portal. (Also see our FAQs on logging a request)

Above mentioned applies to the following email addresses:

help@sun.ac.za
helpinfo@sun.ac.za
software@sun.ac.za
quote@sun.ac.za
student@sun.ac.za
telecom@sun.ac.za
students@sun.ac.za
itkursus@sun.ac.za
ittd@sun.ac.za
portalhelp@sun.ac.za
pbk@sun.ac.za
csirt@sun.ac.za
soc@sun.ac.za
ithub@sun.ac.za

If you have any enquiries please log a request on our ICT Partner Portal.

Unsubscribe from Cortana notifications

Wednesday, August 5th, 2020

Recently Microsoft activated an automatic status update which is sent to students and staff. According to the company new Microsoft 365 experiences, such as the Briefing email and Play My Emails, were enabled using Cortana enterprise services. These features are currently available for Stellenbosch University staff and students.

However, you can unsubscribe from these emails by clicking unsubscribe at the bottom of the email or unsubscribe at https://cortana.office.com/

Phishing scam from a forged email

Thursday, May 14th, 2020

We are almost all in lock down and less careful with cyber security. The scammers know this and are launching numerous attacks taking advantage of the “work-from-home” situation we find ourselves in. A number of personnel have reported getting e-mails from “Prof. Jimmy Volmink” asking for assistance and are not spotting the tell-tale signs of a phishing scam.

Here is the mail:

  1. Notice that although it looks like Prof Volmink sent it, the email address is not correct.
  2.  Secondly Prof Jimmy is a very approachable person, but he is always professional in his communication so he would never say “Are you free for now”. Nor would he say something like this: (if you did respond to his mail)
    “I am currently in a meeting and I don’t know when the meeting will round off. I would have called you but phone is not allowed. I will want you to handle something for me right away and I will be glad if you can do that for me as soon as possible”.

This is a spear-phishing attack where an institution is directly attacked by impersonating prominent or public figures within the university (like the Dean) to gain access to the university network. This is an especially effective means of attack with everybody at home in lock down, where our guard is down and we are more relaxed. There was a very similar attack in September 2019, using the same tactics.  

Prof Volmink’s account has not been compromised. Phishers are just trying to fool us into thinking that prominent members in our leadership are emailing us asking for assistance, but they are not. It is a scam.

Over the next few days be on the lookout for similar mails that look like they coming from other people within the university.

If you do get mail like this be sure to report it to IT ASAP so they can block the attack and help people who have become victims.

Please immediately report such phishing scams and spam by reporting it on the ICT Partner Portal.​​

Go to https://servicedesk.sun.ac.za/jira/servicedesk/customer/portal/6/create/115.​​

Fill in your information and add the email as an attachment. Your request will automatically be logged on the system.​​

If you have accidentally clicked on the link and already given any personal details to the phishers it is vitally important that you immediately go to the USERADM page (either http://www.sun.ac.za/password  or www.sun.ac.za/useradm ) and change your password immediately. Make sure the new password is completely different, and is a strong password that will not be easily guessed, as well as changing the passwords on your social media and private e-mail accounts, especially if you use the same passwords on these accounts.

 

 

© 2013-2025 Disclaimer: The views and opinions expressed in this page are strictly those of the page author(s) and content contributor(s). The contents of this page have not been reviewed or approved by Stellenbosch University.