Language:
SEARCH
  • Recent Posts

  • Categories

  • Archives

phishing

New phishing e-mail causes confusion

Tuesday, February 19th, 2013

If you receive an email claiming to be from the SU IT department (see example below), do not open it or click on any of the links or reply to the e-mail. The e-mail attempts to gain access to the university accounts using the sun.ac.za details that looks initially genuine.

This is a phishing email attempting to acquire your passwords and other information. Immediately delete the email and do not reply to it.

There are just a few of the obvious signs that this is a phishing e-mail designed to steal personal information from you. You should never respond to mail like this both at work and at home, and you should never reveal any personal details especially your username and password in an e-mail form or on a webpage that you access via an e-mail link.

IT will never request your username, password or other personal information by means of an e-mail.

  1. If it were a genuine message from Information Technology, there would be branding, and it would be in English and Afrikaans. This one has nothing like that in this e-mail.
  2. The grammar is particularly bad. (what is a “strong virus”?)
  3. We are university personnel and students or “users” we are not “subscribers”.
  4. Why would you have to enter your password in readable form in an insecure e-mail?
  5. There is no support@sun.ac.za e-mail address.
  6. If you do reply, you’ll see the default reply address is an unknown one and not a sun address.
  7. The links and the actual sender/server originate in Korea.

More information on phishing.

 

EXAMPLE OF “PHISHING” E-MAIL:

Dear sun.ac.za subscriber,

We are currently carrying out an upgrade on our system due to the fact that it has come to our notice that one or more of our subscribers are introducing a very strong virus into our system and it is affecting our network.We are trying to find out the specific person.

For this reason all subscribers are to provide their USER NAME AND PASSWORD for us to verify and have them cleared against this virus. Failure to comply will lead to the termination of your Account in the next 48 hours.

Information Required:
* User name: (…………….. )(Compulsory)
* Password: (……………………..)(Compulsory)
* Date of Birth: (……………………..) (optional)
* Country Or Territory: (………………) (optional)

http://webmail.sun.ac.za/owa/auth/logon.aspx

Hoping to serve you better.
Sincerely, Universiteit Stellenbosch University
********************************************************
This is an Administrative Message from sun.ac.za server. It is not spam.
From time to time, sun.ac.za server will send you such messages in
order to communicate important information about your subscription. *********************************************************

 

 

 

 

 

No, SARS doesn’t really want to give you a refund and other phishing tales

Wednesday, February 6th, 2013

Every year we send out literally dozens of warning e-mails, and continue to do so, because despite the frequent warnings, people  still get caught falling for these tricks. 

Take note of the following scam from fraudsters claiming to be from SARS.
 
Emails are going out to university (and private addresses) seemingly coming from “SARS” informing them that they have a refund waiting for them.  (Wow! a tax refund) Clicking on the hyperlink in the email takes you to a fake “e-filing” site that has hyperlinks for the four big South African banks and instructions to log on to your Internet banking site for “confirmation of your details”.  When you follow the Nedbank link (as an example), you are taken to a copy of the Nedbank internet banking site that asks for profile, pin and password.  Supplying these takes you to a second page that asks you for your mobile number.  Submitting information on this page takes you to a page that requests the reference number sent to your cellphone.
 
Do not authorise any cellphone message that comes through if you end up in the above situation.  Furthermore, do not click on any hyperlinks in emails or divulge your account or mobile number details to anyone over the phone or via email.  Banks will never ask you to access internet banking through a link in an email, neither will banks ever ask for your mobile number when you access internet banking.

Another particulary sneaky phishing attack surfaced today. 

It comes from “Linda Perez” and has a subject line of “Administrator (Sorry for the inconvenience)” 

It asks you to contact the “sender” with your username and password so they can “expand your mailbox manually” 

Of course this is a phishing attack, and you should never respond to such mails. 

Do not respond, flag the sender as Junk Mail and delete the message.

ARTICLE BY DAVID WILES

Warning: New SARS, ABSA & eBucks phishing email

Tuesday, September 18th, 2012

If you receive an email claiming to be from ABSA regarding a payment from SARS or eBucks (see examples below), do not open it or click on any of the links. These are phishing emails attempting to acquire your passwords and other information. Immediately delete these emails and do not reply to them.


From: Absa Bank [mailto:lis@absa.co.z]
Sent: 18 September 2012 08:29 AM
To: …
Subject: SARS E-filing Payment Received

Dear Client,

A payment has been made into your account from SARS e-filing
In other to process and confirm this payment please do click here to login.
During this process, your RVN will be checked and verified.

Regards,


 

From: Absa Internet Banking [mailto:payment@absa.co.za]
Sent: 19 September 2012 15:01
To:
Subject: Payment Made To Your Online Banking!!

Absa Bank


Online Payment Made

Dear Customer,

A payment has been made to your account. To view the details of the payment, please click here to login. and enter the RVN that will be sent to your cellphone. please contact our support centreon 0860 123 000 . If you are calling from outside South Africa, call +27 11 299 4701 .

Our consultants are available between 8am and 9pm on weekdays, and 8am and 4pm on weekends and public holidays. 

The Internet banking Team

Moving Forward

Copyright Absa. All rights reserved.
Absa of South Africa Limited (Reg. No. 1962/000738/06). Authorised financial services provider. Registered credit provider (NCRCP15).

Disclaimer and confidentiality note:
Everything in this email and any attachments relating to the official business of Absa Group Limited is proprietary to the group.
It is confidential, legally privileged and protected by law. Absa does not own and endorse any other content.
The person addressed in the email is the sole authorised recipient.
Please notify the sender immediately if it has unintentionally reached you and do not read disclose or use the content in any way.

Absa cannot assume that the integrity of this communication has been maintained nor that it is free of errors, virus, interception or interference.
For our privacy policy or information about the Absa group visit our website at www.absa.co.za.

Absa email disclaimer and confidentiality note

Please go to http://www.absabank.co.za/ site/homepage/emaildisclaimer. html to read our email disclaimer and confidentiality note. Kindly email disclaimer@absabank.co.za (no content or subject line necessary) if you cannot view that page and we will email our email disclaimer and confidentiality note to you.


From: eBucks Credit [mailto:credit@ebucks.com]
Sent: 25 September 2012 11:56 AM
To:
Subject: eBucks Reward: You have earned a eBucks points !!!

Alert

We have detected unusual activity on this account and for your security are temporarily blocking access. To regain access to this account, please click here.

If you are unable to login, contact Member Services at 1-877-786-0722 for further assistance.

Spam – not just processed meat

Friday, September 14th, 2012

Spam, or junk mail is defined as identical, disruptive e-emails sent to a large amount of e-mail or cellphone users.  When a receiver clicks on one of the links in the message, he/she is diverted to a phishing website or websites containing malware.  Spam e-mails can also contain hidden malware scripts. The opposite of spam is, believe it or not, ham. In other words e-mails you WANT to receive.

The origin of the meaning of spam in this context, can be laid at the feet of the obscure British comedians known as Monty Python. In a 1970 sketch a group of Vikings in a restaurant starts chanting the word “spam” so incessantly that no-one else can have a conversation. Click here if you’d like to see the original Monty Python sketch where the word “spam” is mentioned 132 keer times in a mere three and a half minutes.

Even Google is amused by die word. The company once hid a surprise in their gmail users’ spam folder. When you clicked on your Spam folder, a webclip containing a variety of recipes for the original variety of spam. Amongst others recipes for  “Spam Primavera”, “Spam Swiss Pie”, “Creamy Spam Broccoli Casserole” and “Spam Veggie Pita Pockets”. The first spam was sent on 3 May 1978 to advertise a new computer system. It was sent to 600 ARPANET users and all 600 names were typed in by hand from a printed document. You can read the original e-mail here.

It is estimated that, from August 2010, 200 billion spam messages are sent per day. Lucky for Stellenbosch campus users, we have a fairly strict spam filer and huge amounts of spam bypass your inbox every day. If you still receive unnecessary spam, there are ways to decrease it even more. If it makes you feel any better though – according to Steve Ballmer, Microsoft CEO, Bill Gates receives four million e-mails a year and most of it’s spam.

SOURCES: http://blog.emailaddressmanager.comhttp://mashable.com & www.wikipedia.org

Money gone phishing?

Friday, May 11th, 2012

The second you connect to the internet you put yourself at risk. Scary thought, but we tend to forget just how vulnerable we are and the easy targets we become when we’re not careful about our safety on the internet.

As an internet user you expose yourself on a daily basis to malicious software and the possibility of data theft. This includes phishing. Phishing scams use bogus e-mails and Web sites that seem legitimate but are actually designed to trick users into revealing personal and financial information. Computer criminals can then use the data to spy on or blackmail users, hijack their online accounts (including bank accounts), spread rumors, or operate under the victim’s identity.

According to our local Stellenbosch ABSA branch there are still some Stellenbosch University staff who fall prey to cybercriminals by clicking on phishing emails. To make sure you don’t become a victim, read more on phishing on IT’s self help wiki.

SOURCE: www.cnet.com

 

© 2013-2025 Disclaimer: The views and opinions expressed in this page are strictly those of the page author(s) and content contributor(s). The contents of this page have not been reviewed or approved by Stellenbosch University.