%PDF-1.3 1 0 obj << /Type /Catalog /Outlines 2 0 R /Pages 3 0 R >> endobj 2 0 obj << /Type /Outlines /Count 0 >> endobj 3 0 obj << /Type /Pages /Kids [6 0 R ] /Count 1 /Resources << /ProcSet 4 0 R /Font << /F1 8 0 R /F2 9 0 R /F3 10 0 R /F4 11 0 R >> /XObject << /I1 26 0 R >> >> /MediaBox [0.000 0.000 612.000 792.000] >> endobj 4 0 obj [/PDF /Text /ImageC ] endobj 5 0 obj << /Creator (DOMPDF) /CreationDate (D:20240517023056+00'00') /ModDate (D:20240517023056+00'00') /Title (IT-artikels) >> endobj 6 0 obj << /Type /Page /Parent 3 0 R /Annots [ 12 0 R 14 0 R 16 0 R 18 0 R 20 0 R 22 0 R 24 0 R ] /Contents 7 0 R >> endobj 7 0 obj << /Length 2603 >> stream 0.702 0.800 0.816 rg 34.016 34.016 543.969 723.969 re f 1.000 1.000 1.000 rg 45.266 401.695 521.469 345.039 re f 0.773 0.773 0.773 RG 0.75 w 0 J [ ] 0 d 45.641 402.070 520.719 344.289 re S 0.773 0.773 0.773 rg 61.016 617.359 m 550.984 617.359 l 550.984 618.109 l 61.016 618.109 l f 1.000 1.000 1.000 rg BT 278.868 698.693 Td /F1 10.5 Tf [(POST LIST)] TJ ET 0.200 0.200 0.200 rg BT 212.789 670.111 Td /F1 14.4 Tf [(INFORMASIETEGNOLOGIE)] TJ ET BT 221.824 643.466 Td /F1 11.7 Tf [(INFORMATION TECHNOLOGY)] TJ ET BT 61.016 583.841 Td /F1 14.4 Tf [(PHISHING ATTEMPT: SARS EFILING LETTER NOTIFICATION)] TJ ET 0.400 0.404 0.400 rg BT 61.016 561.835 Td /F3 9.0 Tf [(An email with the subject )] TJ ET BT 163.058 561.835 Td /F3 9.0 Tf [("SARS eFiling Letter Notification")] TJ ET BT 295.493 561.835 Td /F3 9.0 Tf [( was sent from a staff email to staff and students on campus. )] TJ ET BT 61.016 548.099 Td /F3 9.0 Tf [(The email asks you to click on a link to download your SARS documents )] TJ ET BT 354.137 548.099 Td /F3 9.0 Tf [(\(See example below\))] TJ ET BT 61.016 525.363 Td /F4 9.0 Tf [(This is not a legitimate SARS email, but a phishing attempt from a compromised sun email account.)] TJ ET BT 61.016 502.627 Td /F3 9.0 Tf [(SARS will never ask you to provide any personal information by means of email. By clicking on links and providing your )] TJ ET BT 61.016 488.890 Td /F3 9.0 Tf [(information, you give criminals access to your personal information and your accounts.)] TJ ET BT 61.016 466.154 Td /F3 9.0 Tf [(If you clicked on the link in this phishing email, immediately change your password on www.sun.ac.za/password. )] TJ ET BT 510.188 466.154 Td /F3 9.0 Tf [(For )] TJ ET BT 61.016 452.418 Td /F3 9.0 Tf [(enquiries contact the IT Service Desk by)] TJ ET BT 222.080 452.418 Td /F3 9.0 Tf [(logging a request)] TJ ET 0.373 0.169 0.255 RG 0.18 w 0 J [ ] 0 d 222.080 451.267 m 291.119 451.267 l S BT 291.119 452.418 Td /F3 9.0 Tf [( or calling 808 4367. More information on phishing is available )] TJ ET BT 61.016 438.682 Td /F3 9.0 Tf [(on our)] TJ ET BT 86.531 438.682 Td /F3 9.0 Tf [(blog)] TJ ET 0.18 w 0 J [ ] 0 d 86.531 437.530 m 103.541 437.530 l S BT 103.541 438.682 Td /F3 9.0 Tf [( and)] TJ ET BT 121.055 438.682 Td /F3 9.0 Tf [(Twitter)] TJ ET 0.18 w 0 J [ ] 0 d 121.055 437.530 m 148.055 437.530 l S BT 148.055 438.682 Td /F3 9.0 Tf [(.)] TJ ET q 450.000 0 0 283.500 63.266 142.684 cm /I1 Do Q 0.400 0.400 0.400 rg BT 61.016 419.643 Td /F3 9.0 Tf [(Posted in:E-mail,Phishing,Security | Tagged:Phishing,Sars,SARS E-mail | With 0 comments)] TJ ET endstream endobj 8 0 obj << /Type /Font /Subtype /Type1 /Name /F1 /BaseFont /Helvetica-Bold /Encoding /WinAnsiEncoding >> endobj 9 0 obj << /Type /Font /Subtype /Type1 /Name /F2 /BaseFont /Helvetica /Encoding /WinAnsiEncoding >> endobj 10 0 obj << /Type /Font /Subtype /Type1 /Name /F3 /BaseFont /Helvetica-Oblique /Encoding /WinAnsiEncoding >> endobj 11 0 obj << /Type /Font /Subtype /Type1 /Name /F4 /BaseFont /Helvetica-BoldOblique /Encoding /WinAnsiEncoding >> endobj 12 0 obj << /Type /Annot /Subtype /Link /A 13 0 R /Border [0 0 0] /H /I /Rect [ 222.0797 463.4068 222.0797 463.4068 ] >> endobj 13 0 obj << /Type /Action /S /URI /URI (https://servicedesk.sun.ac.za/jira/servicedesk/customer/portal/6/user/login) >> endobj 14 0 obj << /Type /Annot /Subtype /Link /A 15 0 R /Border [0 0 0] /H /I /Rect [ 222.0797 451.5853 291.1187 460.7428 ] >> endobj 15 0 obj << /Type /Action /S /URI /URI (https://servicedesk.sun.ac.za/jira/servicedesk/customer/portal/6/user/login) >> endobj 16 0 obj << /Type /Annot /Subtype /Link /A 17 0 R /Border [0 0 0] /H /I /Rect [ 86.5307 449.6705 86.5307 449.6705 ] >> endobj 17 0 obj << /Type /Action /S /URI /URI (http://blogs.sun.ac.za/it/en/?s=phishing) >> endobj 18 0 obj << /Type /Annot /Subtype /Link /A 19 0 R /Border [0 0 0] /H /I /Rect [ 86.5307 437.8490 103.5407 447.0065 ] >> endobj 19 0 obj << /Type /Action /S /URI /URI (http://blogs.sun.ac.za/it/en/?s=phishing) >> endobj 20 0 obj << /Type /Annot /Subtype /Link /A 21 0 R /Border [0 0 0] /H /I /Rect [ 121.0547 449.6705 121.0547 449.6705 ] >> endobj 21 0 obj << /Type /Action /S /URI /URI (https://twitter.com/ITStellenUni) >> endobj 22 0 obj << /Type /Annot /Subtype /Link /A 23 0 R /Border [0 0 0] /H /I /Rect [ 121.0547 437.8490 148.0547 447.0065 ] >> endobj 23 0 obj << /Type /Action /S /URI /URI (https://twitter.com/ITStellenUni) >> endobj 24 0 obj << /Type /Annot /Subtype /Link /A 25 0 R /Border [0 0 0] /H /I /Rect [ 63.2657 142.6843 513.2657 426.1843 ] >> endobj 25 0 obj << /Type /Action /S /URI /URI (http://admin.sun.ac.za/Infoteg/cybersecurity-alert/printscreens/frick.jpg) >> endobj 26 0 obj << /Type /XObject /Subtype /Image /Width 600 /Height 378 /ColorSpace /DeviceRGB /Filter /DCTDecode /BitsPerComponent 8 /Length 79877>> stream fExifMM*bj(1r2i ' 'Adobe Photoshop CC (Windows)2019:01:31 08:42:58Xz&(. 0HH Adobe_CMAdobed            e" ?   3!1AQa"q2B#$Rb34rC%Scs5&DTdE£t6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw ?Ts%S7w7>@ӦHD*@ E51.ɭ'YI/kkvC=fv{veQ'I M͇lF7k6m'c$\s՞?WPK|6ck`Kf\tG&`n>˶Π1}{qgzMW^훙k=GgAM=$VK=Jk˽+]OgDo V=Pѯ.?KHלw"XCtch膲t8ՆX -ߤbޛZ[{\[ss7ڒaz4Lrw5ײtջ= #ѼLTcArO hm7XZYY:nۻܒZ ee%iK~wZ*F!>Nmd`I?4gQ[v GqDÉm΁'Z%Fz9;/,,k Ǥ7nsu%2JۧJ6#+hd q? ,. 2$'L{[thMq1%wq%6U?h0)Tw=AǦuv?$J ~pEO<觍^N팱 Qfo$HJU0+,s\5,1#%{kÞٻgӶO閆ck87uX_SrʧcԲE۲\\w6.$F*R=j<_qF@u4@ֆݻ=Ƌw2v%h}͹;TC f27uMovƿ'&wL繴M81O۹Vh):s6 Zݢ.Q9'׽;~vv nvaqw9ޟ }9kN]Z=@=_͟OإoI.k7ym5xs^׿kI*߫aC֐X7kw9N/X%w٭ޣ=FnWkRjzV mZ\_k7}/cs L~ z֑5YPsikzukү[q:Xun0Z>ѳ{r}7ˣqhĔzLc}a ȸ۵n7n:.akS&bczIkq9.smI]jU^S겼v4u|6l{?q%).kw_s<9"}= ssO朋3ϴ۵ۚn}qݴ4tE'aav3f 1%.P;-o&ǹE׳wҰ6c5s%t/z~{'x8s*s,nwm%)$IJI$SzUvSAԵ(7mlu]ZkCÞ;bX {{SYzn0ǽ?kW5RpT}&TݲAsT7ǰIL~<Պ߱SP8;p;zޙӚa7|v=ʧpXCM\ٱ_)s7Gv:p!KG۶=IIGM$0@p~? 1ih@7ov^,uX pa<,mVS]?s[/.`$-vkæ1hե5߽VRIL*k[f)JRI$I$$I)I$JRI$ާYzӷl`w*7 n<⹑{)$#P<[1tƎCu3tBQ׾ 6e["WXhjJ7'<Z5C[`cdC[nc-cƉr?)RI$I$$I)I$JRI$I$$I) h;4{SckZ 4 hBɭLk!?;^f1/$VO gi3gz2ğk=ߍ/'8v%b#=)!)KSALch4Wv&;=L}4ziWm!lcݼl{}IMA>PG'ڗ=@o1IML%Tv6Ֆm>4:S?+8͖8okjBU7$xcD&2{s(cXy8mO^HDD}rFԕzva UDOwu:`fDa5Ui,϶٣wz}~h6U?k9y 1LOg Вm"I$Tʩ$ꤗʩ$ꤗʩ$ꤗʩ$ꤗʩ$ꤗʩ$ꤗʩ$ꤗʩ$ꤗʩ$ꤗʩ$Photoshop 3.08BIM%8BIM:/ printOutputPstSboolInteenumInteClrmprintSixteenBitbool printerNameTEXT&\\stbsc01.stb.sun.ac.za\STB_PRINT_Q01printProofSetupObjc Proof Setup proofSetupBltnenum builtinProof proofCMYK8BIM;-printOutputOptionsCptnboolClbrboolRgsMboolCrnCboolCntCboolLblsboolNgtvboolEmlDboolIntrboolBckgObjcRGBCRd doub@oGrn doub@oBl doub@oBrdTUntF#RltBld UntF#RltRsltUntF#Pxl@R vectorDataboolPgPsenumPgPsPgPCLeftUntF#RltTop UntF#RltScl UntF#Prc@YcropWhenPrintingboolcropRectBottomlong cropRectLeftlong cropRectRightlong cropRectToplong8BIMHH8BIM&?8BIM Z8BIM8BIM 8BIM' 8BIMH/fflff/ff2Z5-8BIMp8BIM8BIM8BIM08BIM-8BIM@@8BIM8BIMIzX Untitled-1XznullboundsObjcRct1Top longLeftlongBtomlongzRghtlongXslicesVlLsObjcslicesliceIDlonggroupIDlongoriginenum ESliceOrigin autoGeneratedTypeenum ESliceTypeImg boundsObjcRct1Top longLeftlongBtomlongzRghtlongXurlTEXTnullTEXTMsgeTEXTaltTagTEXTcellTextIsHTMLboolcellTextTEXT horzAlignenumESliceHorzAligndefault vertAlignenumESliceVertAligndefault bgColorTypeenumESliceBGColorTypeNone topOutsetlong leftOutsetlong bottomOutsetlong rightOutsetlong8BIM( ?8BIM8BIM8BIM Le` 0 Adobe_CMAdobed            e" ?   3!1AQa"q2B#$Rb34rC%Scs5&DTdE£t6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw ?Ts%S7w7>@ӦHD*@ E51.ɭ'YI/kkvC=fv{veQ'I M͇lF7k6m'c$\s՞?WPK|6ck`Kf\tG&`n>˶Π1}{qgzMW^훙k=GgAM=$VK=Jk˽+]OgDo V=Pѯ.?KHלw"XCtch膲t8ՆX -ߤbޛZ[{\[ss7ڒaz4Lrw5ײtջ= #ѼLTcArO hm7XZYY:nۻܒZ ee%iK~wZ*F!>Nmd`I?4gQ[v GqDÉm΁'Z%Fz9;/,,k Ǥ7nsu%2JۧJ6#+hd q? ,. 2$'L{[thMq1%wq%6U?h0)Tw=AǦuv?$J ~pEO<觍^N팱 Qfo$HJU0+,s\5,1#%{kÞٻgӶO閆ck87uX_SrʧcԲE۲\\w6.$F*R=j<_qF@u4@ֆݻ=Ƌw2v%h}͹;TC f27uMovƿ'&wL繴M81O۹Vh):s6 Zݢ.Q9'׽;~vv nvaqw9ޟ }9kN]Z=@=_͟OإoI.k7ym5xs^׿kI*߫aC֐X7kw9N/X%w٭ޣ=FnWkRjzV mZ\_k7}/cs L~ z֑5YPsikzukү[q:Xun0Z>ѳ{r}7ˣqhĔzLc}a ȸ۵n7n:.akS&bczIkq9.smI]jU^S겼v4u|6l{?q%).kw_s<9"}= ssO朋3ϴ۵ۚn}qݴ4tE'aav3f 1%.P;-o&ǹE׳wҰ6c5s%t/z~{'x8s*s,nwm%)$IJI$SzUvSAԵ(7mlu]ZkCÞ;bX {{SYzn0ǽ?kW5RpT}&TݲAsT7ǰIL~<Պ߱SP8;p;zޙӚa7|v=ʧpXCM\ٱ_)s7Gv:p!KG۶=IIGM$0@p~? 1ih@7ov^,uX pa<,mVS]?s[/.`$-vkæ1hե5߽VRIL*k[f)JRI$I$$I)I$JRI$ާYzӷl`w*7 n<⹑{)$#P<[1tƎCu3tBQ׾ 6e["WXhjJ7'<Z5C[`cdC[nc-cƉr?)RI$I$$I)I$JRI$I$$I) h;4{SckZ 4 hBɭLk!?;^f1/$VO gi3gz2ğk=ߍ/'8v%b#=)!)KSALch4Wv&;=L}4ziWm!lcݼl{}IMA>PG'ڗ=@o1IML%Tv6Ֆm>4:S?+8͖8okjBU7$xcD&2{s(cXy8mO^HDD}rFԕzva UDOwu:`fDa5Ui,϶٣wz}~h6U?k9y 1LOg Вm"I$Tʩ$ꤗʩ$ꤗʩ$ꤗʩ$ꤗʩ$ꤗʩ$ꤗʩ$ꤗʩ$ꤗʩ$ꤗʩ$8BIM!SAdobe PhotoshopAdobe Photoshop CC8BIM http://ns.adobe.com/xap/1.0/ !Adobed@zX       0@P`!1"p#AB$46%5& !5 1A"# `$0@PpQ234t%֗8aBvqCD&7 !1A"Qa2#qB @PRb30`rC$47pSc%5 '(·331$s!u柄㛔b a_r9MTݏJۑL4"{:p}WަסJ^yF1Uop5ƼQ}9[EkSFl^*۰ktWPU\nk3P|tqr',[jϵ?euٍMva[^K98qrǯŵw988usr`!.^xWfUuc1aouR sN9-H wئׅ1=ίYՙgӖ׼FcDhޮ׺3]Lmedㅭ8&TkmJtvKNjqGtyɏ+ ::ٯ\F~+NGCCt9fcw u7]^6hoRL[H/.Fc˥ݟc:8ݥIe]ӤzXܔ{kh]kZ#Gv^{0ݍݪh7hF厚enӋjzhނ.|l;-Ԣv9;zWotާ|η{twS3p!=8啳˼Vﴪ۔.f5l^vCg)bCxNS6@eQ%|HɻF@)t8YD2/uK!2~q#9>'nKĹ"iiP)VynjvFk9UyUƐd)Z_h1YIo0iig$phwDh?"ĤhJXHDM6%FN_%OF@dIYyTA!ek91 H c02c(m! .χm/<Ǩ?ZyO=Ɩ[쏗UӅmEufKYzU޻_z>|j|]R{=yמz*'g6*cu==3 ̳(R@G|e"<_?UGΘL$g}@8dϑ>>8G޹Ƕ2PhՔY1o1vr2vLv0?y3eFp}_ǶMX2aM1D3s& 2'L:cw@>vyD5ھ?c&KKn ͍~Hw`aٝiGr&Hاw@g:3DAHR:,HKH6DaE61|؞bsI(R$DY,7;:]=J>SETI\Lp1m2!Q:QEʬD?aQ(/vU[=4>刚cOm OWpKL#TgGäoñ˔=El,A!x?1c=A 9q2FD?iCrJ%׏E>rk~Z󁺤ϠՠYt9AA'8$$( (tM$ 9R,g?LRQa@+Ny{IDRJeKL ILaI5#8pbE0&X) 'a0YY鎼0B,ek$220 Y0,p~q` ePCx92P`g% X0xD!gr"0 g"rI0bOdBǽg8ȃ`M7 WG8(LB`PAF$8Жqú.&TaSz0ӜhFZ*?),Ay+(AUG$+ 5ӲuzZ9GGrnJDQqR x0s o*rY LM^j4L53~ύd_c1r_5H"IF2A  ,ss 1_# 'Ӎ9qxq(-BQh9g5V XAHH1RRAC0ذLa1HϒaB jt 8TUc2R,<9)I# I ,`&m1"Rw&!ı R[A tF` 84 sɌFbl'=`O /$NP^q`Ŗ[!,`4xix4|K?%#ňΥ8sMbJ'\z{IC Iut a}b]/Ji|vo*ERlJ9 E[2Xz[y5#+^Q苦^,Ȍq^ݭEkjT ΍ ӷ旽dV$15QUARvu8^Uk؉$ /$0Wb\[׶9Z,{vI/m:D˖Hn o]NʎYw;lfiyDvs)ԒT߿hY@lIAs돏94=F|"gɼ4.F-O?_~n?ڴS!Ll^QՌŵM!L'B[M#%pnuGf&N$Z!gՏς8\q g1c%`ۜ=8%<)Ј pZ5Ɂ/#kNOi%'%bs3qғFa&?ƈaljJc@Q!B &X3^~cȳcGu]1p>s\sE8g>Xcs}8|.g#?Vss:}=qz5:ss {zvR(sՎ4YRbDʂ}90YsFy\=sg3z9L\ 3=1OFz}K2 Ec>Fxys3=3\8Cq_Fzd9=뀋8Fq*U(lmT50XJǡAb 桫rC#2lhyuuq2bIZٌ%f>T9Z,>$ʶNZzH҆Nx B般:!FI芗Qi"4dtT2Vɓ#'ސH-2 !BYkbƿrR^kM-dk>IKW3 V4CcۡurVrǓ k"Z )ZٶSؖ-Wm=i Yӧxشmva"+& !Db*ŜW}δe޳)NUebifL-Utd/6Z{ ~o4C>Ь6^|(ؕoZعfiNqٛU=;S K7Ol&Z9VPVlU|d_q2+ml"witk܍*{ah(M`^?#[6w%s4n?Ÿ ȯ6ݱ kko8+! Hnƺ#uc- F]](=tTo7= %nVlPS1 cj؋BI[7jǽm6d';ձ '7L aۻPvz oMXa[3x7] lή,vvm=ɹ ۫Xó~Mqd6חY(XWl[ZHemd~v˽}=ǠfI'ԝ|':1@"OEan'UXS&Ji * CMk蕆G'('_ꊂL0|3wwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwњgt_w5m(EOܝ8 zko>%9MF uΦ4$RZԿp)o3_:h1=iV? ~/ # U]C6Y)\Xp'c=&׃8 Wm#s"`/ 0 `80c>L  A~Bt轸m͉[uxAWlE3 {5vg]?#wE/;k>?x,sMvf=Uٻ|yt\sIc"=2!^}i)6&(Ylo3[E>[a5'6;+/${72m;&Vo1wCa<əJ{s.?ڭ_ww`n){i:_]Ziw+-Սdǔ][T;'NGŻ.{{I[_j*o"eRVD“C=,ݪe%=}EJZKmݦR''`xeKlv!}V̯#wxa{UuG^Vig;S=Iwo^ġ̲a)Vh)0mlH2=ڏ)ʷOa- B96-Nʬ|։vVhxvw5^Ku^GDtc/}~l:n-ۨi[ڤبGVyz%-O5z,KSW gʂJ5`>6m]񷰕snhaR_/`|]HlZ5SׇTKe!dž;j1>Kj實4W 9Aj1x?ۑV݊1'L<5:SFmxݮᩘluU{yS7z]'kEYc!Չχ9䩸~EZDMLE @|%FT.gM+KmsfN ׾.ٯQڭ4mGlYs61Ȥz#HD6eU#^"Qд>ðw{Sv @j"n3ƨD=M /)Tw+Q1#4Dg;f\U]SZy䑋ɵ/鍧7᱊~UM@xk>4x)` ֙ʼlH,S{WZv޾`)n:6ZXۛ׫)%O)5ǭERݽӍ΁>QU^޿RYև= Xz }7>'wJ +[lK]2%L H"յ/ $ |v7Qݤ be Ec5aUg$/.έ( ٚ^i}Ffԇf;E- ÇmEmE;:^6*$۾zR\emQM(ʚGS)+WeL%ak?l=}wh :ƉjeκE}k֤!0Žh0A RQL*҆)D8>L@?F d|Ʌ?pA%9J"B}lҋ<Kd]Vl/,w{,nC`䶤V( & ^HgxN+\!MviTdnJ17lq 3kT6Qb:[V;ضI"ItLUi!VYn2͖݁`ruY}N`)"K'ڨvk>}6A"${ee&Ȍׅ+'Nv`dINvh=,\)f$99l)KTɪ̻ bZ g핫oSنm=ۥޢɤz+Q8Pk#3g34XXCHpyii;.t6]ŎL$-c|;| &n^[GT,-,o$)~. Ȓ#Hޗm_dM ~rXI`Ee,mRlL2uTU~NȒYO՞%M?Y"!u!ȪǷy9O,;c,&OW6/ҕ@Zp8U#+sy%t{zږij z2Q5JY%=R녇'gs_=mmZ-2@lnO;뽒aי{HH?oۨLF8?CWw(cN?#kRta1*`}虌E4EoidqTviAP f`|:嬮cgtdGaX؜Wgn\fW,;Pczb"}vmQ6u΄ƣ91=|eq(C2#/\F;R˓(lzlJ5vaay5v,l\d#`&ok%~DY; IgRJeF,ݶ~SBh А9Mhr =s67F/nFc$.K7 V,2vNK(N7"CH,AۑYjY ٥@J2KIX/qTaىs Kl&Jee=W2UA @z]Fr3Dne3JʤIi5Wm! ]Ł%f>:JVXRC) Km [ >yۏ3' 677džc9ˣ& NSHR^aᦍ?A Ыtx΃CAq#^ԁVN>?^RFsǥvb\.s\ch?L1၎FA1@9Gq+᳁G9P:GOI+ȹ F  }L`m4 ^yl>'i!RGЀFtvX,y,d|JH cp `dGqn]` LK6NNcVTP+I,A:EYF]XxOIFp<WqxiJW8?a GrzWO\}Բ=:>'Oס?ʤ?_GM glEr@гI'Ǥ BʁڹCs:9.ue4$`YbIщb>#xxxi2zA]@aIKo#.I'c`s} A;Hh1y6#plp@ue7{J8 8 0ANϞ4h4}:$$D]ݴx ;㓞PDramɴԎKwrN㹲|qω׳@#*0(t=EB|ʯR|J샠H]ڻTC APl` \60:MijD#jߵMb-@5WrAr604 ЮO4cXIJ!uXj-4br2V#lːLGFՙ$\98듫M щgăd933 }( E ̢GTnvp^"0EJZhrXk;TeQ fܻtשyD ƼM'jy)NxɪC՞[q5*Ъ2UԪS L&1au=C# Nj$c{AsOl+q' 3\#UIcsF@mDnAY 듮@F;n䀝!جlғUu ⌙(< xHC"Ք!<+P[vㅈH]W1htqڷAU`ԓHv,$r+ O$RK]4=wUl<7 {ʫ>4٥M]#RY"W*'c/r$nA b3l-;+Ħu֝_I=eG#!X@됳nEdwi l%HeiiIF˲2'MҀɴbH#5n>u,U `4[x.3TF# pC`b[5G)`k|aiY52IxV.|o襥b3!b$)h =q59BjfJK4KF%j&%ʬrǽk-[h8TĐ jw`XLavU=sV*I!8*+B ȻJ(C >h?wg[^،}7wW^ɫgy4~#kɳQz[W v9 P6-YR] D!<Ϊi]^;e,6 ˫<v'FCyeDz^Ie6Ic5f.ivzW)2WR`1ʺi 6eسZ(XJ*G$_bR&SNhbyarAY;JR-:5hEqXi=[Y&ۘcu19t:@4u%YFjۧʒ@zw>vH)vT<,"jd\fQ&7e"DnQDˌښFڏT =C(1ɉBH5iyC!oS6 HΥ=yoxXnhxj~: eJxreSC)$Q4k5(hRwxUTHB2GkrExXk]3 0F^( b^ͦԆHo##> "$+*| ,{RuxˮENiEFHfSZz pv7RjA*ƓJ#T6OLHD4B2mdS2#]!ۑԕi)IN<]\ʯXt"ȼJc&9Y]=i"c I3UKQlKqГ,CWXt@,*q =Z/ʛ6+밝z@ʦF!c&Ow5\Ee |Dg5Fb2GZEtwHr2A,*=`$́mK5[%!$1@djۼ,#u: $%M&0^P/@* 64v+˟R;zVIn% Go7p05fU0#Xq,ݐ٢"pH$4(g^#o2ODb_d!GgUcMbZҬȎhQ>W]OWw {(Q1{9۶(|ޭ<]9'&1:AYa ȡہ:HNYa;QU.08 tˁ9kӈRv( "`BcD5b =C $1UB,#;ugfbrN/?< /!^޽VDR'*4\Z%o 3 Sk <&  AKKj+2athi!(8@lJC4xɦկrGW%S)YxxsVhIF-YVdsߒ3K?r\J#j<^n>АURhFwXOp~3YaQ7wwʀ_~Nr8xbnz#Cnr!Dxk,OVjln ,R݅fJG;CJKM;CpAo {JulqW#{'q}XdR wy&|Cx)+К+Z 0 ge^i`Yq5;%9$@fHfi8^=|k✿/[\N3F2vTnT^y_5Hhr_WzK4_v;T=|s?.y -TIDqi]QHx)"):e˭8NK| E'5#3C[nx#?~[rF# NM"m1I.K7&H2Ee)Z zZ}U9>`a捦wI`X2y?x9DKNe6ؓeQ*v'Į"ʿ-y0߼ki-ȂHq4ѰCM 늃x/$_, n2pNyʿK0ARe-Zqbdh`p&Z8ٜ-q\$s9eY#`J:GM+B㹛IZǷٞĐI$1\nݿQ#;=g1"veIrF̍Eʱ0q b3?sF^=frG?W῝>c"nXxYj3 h_ P=;cߙ|>s/ -<[qSj֊f;jX b1EkS;L+tT~G|#Zm9Ymr׎_{2ʶyvm[&V m;>oŔ:(7v*|rC,G$dG.'Sjs/֏-~5Z'r"TDӥb$XaOQ9OYrU劷-4^("omC{1+^!?4x(_!ah)odyy!ER,53o8l| >. Vy#2tWv1T~ZQoy[l9[/f:kN\Yk@n~O~h>:_Ox,P93Z[@hH+[ f5!k_ӨC{Dr|t/Ky)W*EFF̡iO"95rvrѱ$]-r@/Z䥼c$*!&q[? [G񨸬E^Z3\q\E*vvF>`ϯֽR (ϵYݰ@Y=> Kj-=3Ye}ŖB+F=_?߳~ӳ~7mݍ9ƸIhZF I'@|IR U%@l3!g_ߟ`_*Uʱ굵{kBQf$3F,M?/;?6JFZ r*6nlMZD[Uoe8ߛ.rBnntyN4ГiiM[#هba%Z9,|w_%yg?̪Zi9 9^,Ka%Z ~ M^Ն4~c^ko{')$^-W Ģر"h$kn'hy &~tfO-gKk…حJ7f7v^~8#[u/Y{.Nfj-!D~+K6}wdfۻ;wc''S;Ou>I3'5oULfyJ dUTyv<7!6D-qaP OB Qs\xgʥf$ B  nǥ?d<Ѥw`b [8_j#.wȋ̪<_!z9ܭV̽{bvG+MEe]?A.B)+fV&>noP0,?OC|WZ;WR%K/.1|f|5-sM$X H|R8V0oXUjؽa:fJSV^e5p,\?(rr q - (ۊ)CS{G,u5>]r䛕< %vdK4rY?2%k^Hx*Tn%^ՆRk={p<]0\x^f!m_Xb )% 0OE6b]Mrc ej]ܚl2?dNq?_@u1ϙnmy?f'OAN?kϗNz0~yBFG?B!h<~#*2YSG¿!vwU^6%t`;M|L"GK|IR1Sn4HL3a:VOJYwrôsQ$CtX@0 *vOlTa@UKv #&~So!mt,>uJ[{ LUr|m 'C-ds4cad fX>GFUpz]VhȃfH0hH:{$hhdu /Uˠml;TfYYstgxi8weЂQQ2uTM1Sp4RЉcYBH!fڳ]!5eHîQE;!0mF'!lmУ 4 #E* oC$`(gj,mvr,\0$F|SGW,A b\IvvS2*Dr)UM&"b0NUUt@ݷ 7c$DK5|y8\]$_K7y9k9lK19!ڏK$+7H6ضa HZ\i2%M)wy0\CK[zB^YA%_;fpU'*D]À}-,HȁyF;{V:)/ ecik <24uр OS3Fb*CǸCԱ]ĒK#{Gi-9Y+SB4fЂK4$MRpıy̌:`;(#B!5`ic)3dUF9*yJ ,lnDc$Hܹ춧~U10#nerO~pYvվӍ15{,W:ce eh[F 0@}^ 9faޠ >J#a&Gu+he T;dD?zEFL*=떍1#UV*M#w<6û`m9,M x&$I308hQ}\morEOb2);(ǩB4C `+T)r)#?P|HCT}$} a$#O1hzamˁ÷rwcpF sNf1Ƨz]aF 3p3t$W"L0|pƠt9>=U-/J;NF +w͛ cHP&G uNge{߂}[~Qu}ۡ쮀h@:-䜝|uz@¨Q(tɝϨdF|zr(S$~HL O0@A cJ4L0F<t8˶2N <7}_72<<5#gX+.~1uGf?@@.9$ OC0'H *)a@`@Q6>?OR@G7Om0 aHG9\?:3 A>Ө221t+dzUUF0<L@~%N]1qO(f7$16>I$} e mw>A>sKBnMϴgn̔y*GlpfeEf, 88|ܯHdTaA`!$; z*7Ł"=+gjvI!\ط D4E0c1delFZ]IyDGj[®| 3B$fd-Q UbQ+emBUYYҪ@R mov1ee\+.إyKDQѴ. V,JpdcH!IMl_J{fx8댠mr"F~%;1pc {J^BJh>ZHQrUS]SN20"Mtm镔e_k uXd:˂@Wh&uw1}WPsf^hG,teKPzj߫Q3L˷;;H˔zq8r94iqA&C5 ;A ˜T.RH$U2(ϮC70cxpzbfyI)H4e26 60v zH w AV2/27. YNT-,N{lLp=X*vu%+y@6iV`QܳodP@ 1 <6zם&f*a. B-mp 8XW,,Gsb&felЀdA`qشfgOrJ,gpWF ]Ђ`69gĭ~Jj{sInla^[椋!ܚm: EOU̖䙕:l$ + \#_ u XZB#7huIH\]U$X=G ps6GɴAė(YQdڪѪQ*;)܊@Ybq"Ip*6%|)%5IV$%~WoVC*m?Ѵ )^_\5!ǥÖbs\od'4c.%o ilEavco;%|- cRUe{bHƌmL /$DqEjpxIĜBfH*{D*SxԤ[+@i$HF"jB)79\$J!kڊECYkD9:֛)܍($#k߆(KHb01ʁN $|d>%rRF?gesB=+r6ɸ=դp>T\dj47h3Oєc_,+ՙ! `۲`:(O:MñOٻ?NT,qrk]Fvvk-dDZB[2ńR5XȾ LdU8$C풬"tVs4ya8ozm3{ 2"ij%fIj , ) r6LC@[s'3,Tw:Qfoq$u! #1V'aXU!*T!KUn=rsnرV'b GL$UfG]14Ȃ91,QniJ;,\]# Fg_`W>P ڰpq*3 ׀!cT+¢2I}ZX͆"WZ! 119`)'3pE!K-i#=ºBs Õ*Өf9Yer5FdA 2FP[ٶ^;u4jl|;1z#HUº-dS1OlIi!u"妓jʖD(wǺ?nO C2bCvE^NWg>DF,u VJāT1%Wq_#ʶkE,q,xN/#UyP˝!1xs=%#evXiU 6(=8ҿ45'tij(M yդnuQ3i8U*Zl4l@Dߐ2#j%9FLRR_5x+;($B$ ȻcRa;j;b6w[U+Q/$QK|$L>P P EY& I(k?vͯyl쪲H0{ vzM$lK 4-oO\%yrNGlVy@!Pa[nD6Њil<Ѹ:<-x*m"ʥJPI.Xj,&̑LkS<]$En|bXW21x4 b)CX~䱬D 5EY8ߵqbjer; d}{zN, 0vG*(NF IL%B C,`H+8Bz%bWVwcRX{cjg^r aLbfQ*N]`]2vHef A,Y#𰔣‘VI2ۜP%Cb綉mdk [j$|:/y9P9M* hāoy(eo5}RؚJX %̌ En5XJKv[>l+ "eq_}2LƵr_A:f*ojcԘGI^;9u/I&XĢDg1H6@vOCpE=ҡ+e °W&DH+Ȏ1.PԞ{+rr*"b ;ፀ(=R)ʏ1ۆ]6@ jl,qbũ"U,"i#zp GɃ*~MoYc^p,=d>YT ʲq1`KJAἄ`6-N%RǴIaܮѹ.c'oT7u\|J3g9jȧ2=r&̒r8@REg`Fs#Y4F,e-q/$q4nX3΂' &]xE5#Vt2i]Qp?RnOǜ#ܘ }bBeP :l$VY*{<(m{PP;Jo=SxSC$>#֊r0tǁ?lG$l>*4n>dj3AJ ݞg 3;cENBI'"Sd')ۜ oۑp|~66)5`H*s: :3YbGgC0:gyCG?Q "OKR:' p)pn:1QҸBZ- a #$Ԙr dz!Ue};=PRą#&>{9:va۝B3I'1*˫ !hQpA "II:Iy]؀59^ML^$wd,q?V@8:?FsF >Xi&bXv;S0N|d(dMS BK b6UPWj3F3H$Zb}>$'! FV `6W^<{)8!Y&bv^vbFI:Lc{)Om>1kٍ쏦10=IvVw\k>=^k<~!҃ 64r|sR.(컁v zRou4_m ͐x'a4!Ԡ`eSoJ0%IډI&/ F8'?g&>]NWcc5~o{BGPTŔ NJ=,_ *XiZXWON9^į<Az]6,A\ ۑdtXiNӭ>>?}duY>:'׆ZNǢ3Dz\}6>ވ>0r> zϠMYϑ:u:9xgtˡ=we}n܅GT~m:ҬFYI +St5vP# %*3evcFȅLˀXQLx'$h.%E\N"M0\h1=@T>j= Oԓﳃ|?gN?N<Fcq@$t:^ܠduE'X0'__uE'D{sƨ@?@}G>v3.H8# m9l@>?IlD$p5*ԲB:ix[ s6?_Y,t~t}?yqRz^Nz3׏Y:D<~C_㞀:uIӡNkz>]gu~dD=gǯ ksҌxt=xt5utd}z8=>ޠj;\G܅U>HVdV5=fq>9t걱eȉw &2D ̱'d!RYXeUALy U1v ==M~:vcW& oݐ1Szݲ7cQ E ;%S'jM1` zC]̛6H!.6I cݖ*sLrfVBvQL;'+AlG+v9;#ݏ U4BFs|g] T_%x?nc$p!4cm&g2(TO[mZmS3d!“^R!5#WުF/ư,i2Nj°}*IX՟G5QZꊋ਩3kYq,."*3leB Qj쑊׵Ur#r*/Agm[\E=|(:Q "%̪OkT?ؚ M"GlHءcƏWZr'P1q1J@JT<:6M4#4BZsQQE_>{?jkb**'芿=״ K&[0s#xxa nr9_O_LZHb9X$2OV5tfሂa\gdz39sr/UAmY51$WDx.PlH'{j"-}uz{=N8 >_OԢ$=o>&zi%{ 'r2&hIzO,S)(DE DJ$@!UOX?ˇ/ ݴ:`;6JВ^N+)J\FN31[3ؿzZne4zHma]V`i_Il;@c kg4&A3s` fQ\:֖}Z%1SDQƬY3ֺMޔ jx sW4q54~=VZ"$[ޑY枯xC4~GK*HyI'-_hƖ,U]mETL,lMCP󃰵z*I 2Hf\C׾yOr}QN#\-p[Zt:ոKM)쑿8S[ +ΚA})ۉ3(q@uK2ZE=P N4r?{X{;Cvne5&)1&`oqJ-3卧A쉟+Cu\:ޚ+1dLF{ņbLjc#gEJ,G635Xx-/5>=wr1wamt81|ܳ v--,| zW[@6kzD9 OuF5=4FgO%d_d:}ַIrRũžNASE@m;`pFbRM;-Ά#uNZ>;S:-)(e6I0 cX5-7=( ZoyYZ ,h{Ѽ\=/euXBd k՞M^4aME'2UGL+%%i%.(UkeEվ@6tЕ|uej6]Ԏ{ʗ kEa@)+,t.t>SJ53Ej鉺Qm DI60)8hĠʗ 3$7hs*l)`ʒ&Y ؍Tg^WvQ.tzHamo4}CcI$1o6pSlfHDD km:JƊs;q}~Yǻ/doܺQ2+&FQ_S^Z]S WyYc5]bV0"f*lτr%3J9QD֖`˯fizðxBޖ˛ia_^VYIvcaۊWAk:XyE_e5|㵾\+Ƌh^H{Ury7zM'H-)%5z¾hvA[J';w2E,!RllWjrL*sx`r-&?QMhL9#fV,[[+rnmc{Vkr7l:ӣc]7ȱ$-dn`pZ-tyMG̬z`94Ms5H|@d| j ;u1awK_C &{(_A4ȭT+Eƴثk3ek&9q[/c*֋3ɮmeYS*d34 \FT)߫ d/@r~~HfI9G/+\ϒkOV訟SJUx$HRV!A3箕\k|҅+W>ʕ j0TOt%)I ZJ#xf{;$H*+U~V3OX\D3!.!1] 1bGIJ# O{#VEg>K3>HQ5PIUHa^#!`6ToꞞIkV= 5T5̵R9BV}["TCaZb4WHd#g\VuVNېHYiP4Ri"t'#1#k5}Q=>)(3TtԮWSWVT2<")zLb}YSv{l*9n`)D !#$67r(tܮnίҙas6Jֲ 6Il zXž[~NS6E0)WQu=\U4dumAB!d Ol~=QM,P2 _kf?,ZI}GgDZ(VyclD+1 #$nVS9ne qN1ih֟c0fK+W{\P˹vcgL>'5 McJήe|YĿU^ 1h_v@xZ\m$֐ܛFUL6h(a$LIj'Yje܎-GO5"23Ւ毱D?)Yq[يJWt 8 !kAf.ɑޯkdr"9}B }XB k34i 4Vڒ5ZG{SһLJto[Ս}J4!a+sjp `,[alA\p*E$j;~ ShJ#7 ,15eZ_D҃΅pζ KZ5ݣXFa@tQ,;5U>~yK[m%AV(FY +;iI*U> h19j_um54I;Ŀ\LAxE^HdQ5oG?U__~ɽj= 0EU_V6dESE|tz ;gOW_bK&l~Ѳ#FS}ߏԴY,Ž1 5GLy?zrX 1Kf;̔NJ&XkQAU\et1|c4t1IiOdTB}yrnΣ*&Yyԑ;t/gT>hC6`&Q UxD~h cHtPJֺEw m|0Hc|hV@cdh$XHW'*[WsrV =e\J=Nj(}bF`l}=2 R}0'Z<@R+zG#Q}>*j$h \dmBB뇌v}= cXDO]&N(ǒZ˱ R I喙2y|`l_si]uTgV<Uҫ@ED>>8Zٖfgƭk5dJ>r|uH;}GFrG9EI]m}F\I3c=צ躔z ̟98^C76յ:|@7S[ Zs&E8#awRt>&\;x.Qk҆KP #ȳH#;Z6ݏEgqܒL qb.KrWC [<0Y{j<&zcǪۙ,-dWS^$D\XHbEjGܗe~M{>&M|mgbij9 bDoܿU8਍Yϒꫮ,h{|qZGXUrMy**|Ĭ_o5O\:3kWEJ{(?>)ゲ7{atk1wmci{#PŌԒTj*.x?\W4:C]C+WPECyGz9+ s]Onx\MK6nnb;,|%khQ ɂ9, ݕ4@pW$وO3l$8tANNH] bŦzoD8ҵd4Oң wyI>N}1ɑ&_I~g[ibˎHEfH[Qdkvg$-pۦyW֦9w<΢Y8Gܦi*Z!'y{EEs}71HVHox/ZۤYI9(> eV{Wk;^ǹ-eOJH܅s\奯ZxGUx h$YY^.`ޣKFdI@/;^1R]KEyB5By}\)d8i+2۞+䳐悿2s3*?G׷F6 ,f";&5szPϳ!T7#5g+sSSt Oab=NHfQ%ל#}bET񞉘ԙ561)u4`sb( &)=edF]6se.Kw/?:\B6LzS G]^dI|j-'gw~PXw=ܫC˃|u|&C,7¾oV1Yȹ?`bzkwKXXr*@D+utn'%gcKET<*˫^awHgsHsZn7ҽ^;'K6g춞:ltwPn7iؒ1:"AiA *>q"G|͹W3)jka:Rh{hjvzy#4?SOuƜt@~W`+މHO G͟3yz~L^x2aO_]9}nY39;[ dK oFzxoVim=-vT OHʾv <28hDS:ϙ+xG7rO,潫oZ\nx\wxf/{gOkQ}6 O(`ؕ;:7uL}e5|^zigDT |_niߩ\LGT~N4֔g*Id{oԸ--鵣R!,]m :ڞʪUS+E.fحa7tTt,4rY r;C8:XbEg3 _Rh>5Շ佻 2r [K|\7T2ԳRf=>:˩[wfǏofEM腇CJ)ڙ&g6iWQ/kgOS,+)8.#+ Wu X!QXcs^F-|؅m1s?+zqSItܓC,#$f5Y'1=#V'<_kC&eC-x3ylz2 ǠEl>+,s cͶv*ج+CMY}nL$a8wvv[5NK*g gw|n,IY\A>9595'?]Cgp\i_ IEF$kڟxYN:}sp^%i WeiMj$:7kMUc!h0V_JSΜb&#_'Rk5Zw[($Sʝ+Ci&mF,+ ƎbS؃|h^dC=*[T9v6{ށEh uo-_ V\k}a_,w<2ET=s΋/+2CsnVj:yb_*ViE"P囡fq,7ol=`INtu"Dlϥl]XMlB=̉W !]剧ag@0u"g%v0̍Ź. Ǻ'x$+;KY1ZA~+k퇏̒)%ףOZ趺] N c e|&[*j7ds#]eqЎ4!l  Rw)3s__t]kXuu+[Sm8^M= 24dlq%fmsRf|v\iK;oyHxz]P3Oak] XXJGI|7uPFRL5Kg'BIz1/ol/mXcRPnh=+5$M>WWPfrA[O*SXE0[HTRsg ynӚӷPwj:RsvoxZ@G+8>sc~ϠǏrn^m|Ss? ՚Vz }vbӢtdͤYT+R|" 9tA7xWr_BrIɋ 2鹂J}ÿ_0ypJ/*ݥ_[~ϧS?,4:bSTWً#8DFnчkޥqk3yc+38}PMeY,nB&8>EҹZ=rsUN5=W+EWCǪn L애U[ NF^Qws1<Tɬ[<,z k'i^ vb'MiCy <5/qL ra.ga7d$YPMs Ӎcd{kb&")ǔ_o,~]B@#h<{}7uLn>,FVIvvʌ=1H=Mn6m:~WEJ"kl+cg2%wu.?戭&+ y^'o/ 4 (_n`ᜠY*@tKMC~}bΏyZ EpYE?]\;zȬ0{܎lAdy~{$nCy%_Y8(:1zj r9)}s^ovkħMcs0kZL|P[* cr5uk]VSUuQ:k[ܨҚ@)H$#3ş퉫]ZI .qy"y>6@m]ke4؅%j'!J3묻 U 7TxsO^ٍ0.t4iMtq7|d<*[=ΉKhk(Eås+̞9$׳\n_kz{}$O;Kg3C,;u‹qR+L0i1ѯte9p.}kOA麒7q"kμz뎊.M' /]DHZ`ͺ6ږs: ^QX#42דH-RX_&#ɷzU=3KTNoevZK[EB=4aKP;O^Zto/]z[vkS/C70aT~EUDs>o(KMux;دp(sc/{knyyx7IOLS,@ a_cWQvX欉#+jI;p dMlй_쫿\[mE(WaOX͎;v*⼧@{EL>YHmN| }g)!ֶD*'I2;DO]ҖCtNX)fhʂT *GI=Wmm3u^wBտmL8GG}Fa$D -6p8!?{=ZzE4UcYSPe0`I5}GHE܌G9)2SouyqYy] e<SI^~?U9-s}@6W1OW+@_r* SOjN?iX,(-H^睘U)'B }0{["6Os)Y=yKh}%E]\UXBА< cEGV^h,uKFCtֱ9mnCyb840F&1ؾow}~?U~a?_GGj#5QT~?x~?U~a?_GGj#5QT~?x~?U~a?_GGj#5QT~?x~?U~a?_GGj#5QT~?x~?U~a?_GGj#5QT~?x~?U~a?_GGj#5QT~?x~?U~a?_GGj#5QT~?x~?U~a?_GGj#5QT~?x~?U~a?_GGj#5QT~?x~?U~a?3ŭ)w-öIo7Kh&0~ϳqEI_V{%{ÀV-nCy:Wɺ5]Ep pFĕ|Hf RF${6;ݝ4U^9˄}ꏲCܴ:6cíy~& Zӵԉ odI2HqI jWn" CevJ褨% +dM)a:\HK4UK>V B^\޶m4wE4M>XA#ጅ"DŽPK#6ƒ@XD|RFVTpyGkԼvIO8>մ /yD XLp8y{.KuQyu#TSEɊe>D: G&퀤"žx02T-uV?29ϘR~N4yμf\.Rk,鳷4 rQ/,ձk=Zk}ϴ<5`CYXQ b;_=kOx=ҳW7ʩte[Jt|0{ƎbP.\;BVR91|s\ċV'KndLg鈵߻Pt5ͺ¶om|;K$VUzNtfL#byg6c|^DZL zM4_/EC %6k[/ $:Dg 6+eRLˣ9sqK҂5мt>:c{VG6m"hy/xv<f7/'=kд6gɖ)ȝ8&wvWgs U#sn-|jm=K;/L}͉7?pi38bg{#%ַ_D۞#DXXL/0h$N+^9DwzbʈMs\k5QZzꊊ/}c=kr7XUOW?~b9G5}Q}T_EOOs{ccS{j9Q>{Yr1#}_UF7SD_DOֽtjr+r#ժTTs֢""}5s\55Qs\s\T_{?aѣز1b9GEj;ھÜ^9k]=TT__k潎Ds\G5TG5ꊊܿy.xEXe H8MJt} /䟈y7I\p8L=B\I3C +;)u:3ɞ<>(GH-8МN+q_[e3")) V9*.C"Mw-/sE4P?Oe i&Xfs=:5'w%.ݺ\p/oY>j(3kr&3]?r&MKMv ߓtJffI{g\g`⥭T;xӢy*^U_o)c:84'^-mm$ Ͷ ~SLmE85#9:*'{pF -G|[jα&p\Y8|N,dyTxJ|#U 8Y̮ޚlz&_/|vCWp7V7 ^4ujϐHjvo y=f7G6w~.UlGPYx^eȁU9Ο펊)"x?7~Gn5>.51&OqCn'}Ş6#̯)7[|{n|x*+"|]_8'Ĵ!dv<#G bҘkJ9QNd=:o/|o-a꙾g'DLmmcd/)%o㥟N<>O9_֖:Xh4!3:<5s2P3,P(=&ӗMF/3fe}y-A?E[f3ZZe(QM6z [x1YrKAʹ*aZM (\|/,;l${h<}V_$o°#Z]KLv)R0E"{qn 蔔|Vz7}OEs9dv-jPT"JO"v*<8Gu˾}AN]LVr=44hT52r*?\k>Yɗb黆KFsԦdc01s>ez3koOԺF+uB~eq:Z Y r7|B E O*x_WGe6o&W]p(P&ƮE0 $8gMR8Js6xXNK ~G"M'˓dvZ5 -p餻϶^U<=}z/\e΀lg6p99QlL:uWaV5NgkC {fftJ"ft*vWG A=%Go;o1Lv~knӯf,)05P5cyf&Qڵit^@Y t}"&bn>j:nh㮶Jd1{(,G5ܺcs} dZ)jϸ oCS_'HOt\9Ty Zxe=.;n=ώ79f2>KIZK%k^("}kA$DLYXOo8zE']hdYSY BIB;{?o9^-f,Z Y6]șL ĺ@k{ZZLȟʮG+A󎆃 wyM49zn-;+x%N{6WNVgg{毥Ws.w 0UCD2WU<%@,~{]o7K3u=_+Yb砺γ_Cx#YZSjWwmcS*l*C![*Q 2]rX a4Ή}ckelm6'8bIsQF%pm8f?$k%2Dt7Z*.P_yHIuI F=E֋Mgj (+DR1Ah⍿ƢSh_Ÿw;yw53%vW=~L: &eդO*'1>SxK}JF}&"ON=6"[RE]K,q݃x0V=CZAuSOml5ƅRDG6'yfz6+TOzalP[gR= 9Ɔ+H8^/IZv`z>9_ygՃs^wz 6#n#S^ ͰBL{nk8 38U&4exښ=GU"=_F{oV%kIGm9::CUlxۋ >V:iLl-Y>~KXte48)9K+;g⛖i8ķق,Aht"j;wS^DŽb*zDs'"~`|+-\Յ-eW[33g#4@)&FP0lRT^]suCn(6WE;?|ꮰcKg[Ib,G) J7ExZ,2L8XbʭEg5YK~##x#,>+tyδְs$Y%\OMݔ+nQ]#r -:|#U3i9kM h{z.OKk2.sTfW T Gsꭦ/g5`vUJ]O*f "3D\!p95{]?8lf'-C+9a=vw":{ (HȦ)sQo3][g`Fk$iWg;>$bmfp`_fĨOO=( -ZVb+BlW&t/ۊMy '+Qؿ1=SȽGRۇp]nGq`l([%M!o4<5 Նr+f$1Fg?i591.:+p$Il=AvH>#?Ye)kouY/ds:VcWVA6>~9HMuVOe[YqSC|p>vVlUԷu,S0hM?Aa_g?|E۷4Z \).-10M }n:PJl(WA,%oV^V]:[,eVK[k4AN5[Ƒ&|5W\kܝrUu+\ nE.|u2A Qcݴ{0aH %b{e!## IhvHzDb<{_Ž3-5{= ;Q醤כ_eO$q9nX1.խXW1FuNGMU7}#Vt|WAu2g1l [gejU-tCcF"~y[= 9 _ϵܧbE DwN)M݋+n'G-ʯ,&3 [Ws;&ӑ=I+,N߅轞o|y0__̼wx!%Bx.ocl-TplHZ v^ZѺFkg`['Y sp$$g:~tw@RxomtS"PPS}C!Ǹr0w:MK3<+x&sBzS{yxgB -Lyr^QXl Dt?32)OgTbȬmO*q?8W19t]qzZuݯ@ow^AWo?),{ 9m9|&.Zg GY`ոfϝvj~Bd'v]Aͨ"яgW$2tJ]l\r;KtΗUZbMl$ ?Ƴ4HV\E|mu^o,cq-l'4 h# 15MXY_wwJѧ7o?{`6`k9zöK??ƨoۛV2C῔%~r+;([i|ԸaZl8K?h9 uBh2g|c{94zm*@LM0SGuP^!3}?JxX .:Q9顾~GN8KO"KL4cm<:yz ԱGcXthX2H~Q_ -LEv긓TfAm*ؐ$I5 ^̶KϮ&MF#ꫭwc**ꪹ0s^ǯ&waؙi0er>GC\n_cDىRV,DҷNo2PWN+)jŔoڶ|3iEל3Ջo={C%] sz搻fh̬<[ Q.5|5uN>VU9;+V+>ޣXnϧKcpO%yNV+u>G_ˎ=F㜿|zNijz.sO`<Ǘg[D7=`ˆ~I4P71 lW Ev`wL+Y?Lq|%?1z8J6O:3zZj@4cURn;4i}=ƚۦ_>TSx mZ-9)z;{JmZzYZL>z~[Zdϡb7"w[r'^5u7Ϯ#Jpr}W{[!YĚDt[+浩ճ{|ǫ:P]X]oE8#߸ U ?sU=ZOTb,sy0Hb$DW<֫XO_bpuHH1$RlwY28G#ZZGqc\#$ MWDTOab8KIQI"s&EdsWQSJPS`uP/Ne^:۩phۥkU٥w>Bݷ*Ryek8]y_5AU:Ҋ"|w+o5&v/VFvKl~W[̶liY^㿎0B8Wt=aױیܼo 9׃,ߋW~MQ M[GN urմ%?IcO7vi'5{eGܳc:}$]`9[6Mn:+#[y r%eo4X=?8Ncm}6k`䆃 ?7Ne']iE}py5 .B 47Uq2d8b^(g_ y;^G=RsNK]vphnib+f8|cӴx6tJHuV1+;1s}WWZ<<|̊#|Ϫ3wVrlX34AoycAwX*7|r*j)hӧD>G6*paS 3Yoeߍ? |`]=WLj!~H."HIgY>Sch'm_0٥:mRk6tM唾ctqOd5]~>DCӝ9D5DU$yZb9n>GCuxN7pM,@}"yX$s^xBww;JDrqΞ:$i70],TϲbZR[h,H  tx`s^q ]ћ>3@1ZvC&C^b7 $R;RksOY6G+no/ JR]3,Ƥo*%ܼ6]%{Z.rn͎o9qaL!A#nnsLܶL3]?)}Yy?A˛-d4 %Ո%}H}͑Ve4C~/~[e3VySSMUk 6vY6f6UH4 *1/gQޗ')M;__$u>s* nCO \}lF;+y|V yW -tP*uyMLȥ e8=mc:d^[;=:\4_ɷjĻ^i{&TaGB3o}s_yg {L\"*n`Jz$ؤREPMpgG=[}\$^2s.[`d:&g[u5 X=]CufVV)N\Il 92ΔӬ$vp{3pm6Znjt:+5w QDʵQ4&7]/toNsWƍ74 G]UY>r4na#+~O&wNC㗏[K»ei;/{yԮz7Ƞ6T%GUȞʶ$e}p:ҿe]N9R:"E[yi'Yf-뫹>{@AOae#rJM^4Ӗn7Ǣku>Ϛ:pnOf#P(M$kkI*pӆBBAL"(I`(iV7H\_)^d>>2\V[䟓 Vz3Ne!LHdng?DW:'zL:pGUm]gM}v{Ȗb}KGVHz7;Z,mH/Ov]s?_]sӹ]HEVae]4B)"|c'9T9c۷\~;>U9Ӡiw2m ݷF3<[7y<9WfUyEkMO]2 yu =%G;|e~;yaƜey ?u-G9qڿ~BEid|sxcnY.*Al yWev4z1rӏcOI=ZOOo'h "?xf9b/EOh2HSȩQ,-B03W15舉>0k+dy C&}c&#bsOInGWQT#~F?~iْ$9 sHFzB!NJ( 6 0آ&5⍈GD5xCl`.V9l8kUEU{j;DS~Q+}}_O_rO_Ou05-}7%tW1굒V[>ghyԒOTI ,KiԍHѨF"{QOj5zwڞ cs=oc1}=S>z"?o4*[{ƈ#z#Z舉""'PS\Ehx<[0*}FZl~ $;=VC*2{QG6AGm>GRZK_L^Gd5䒾:YL>9 w?\=7-w-`\7Z&LV$ ym#,FN59:}F-T"#1cտ^15_Ob/(y5FƒKKvP{$ {8;Z\Dr\["@^#%[_VVP- cL!¾k:lV{!}6;ҳ2 %5 lU{cX!|1|{"1=|oerp|&'5fuI2:$h`E΃jIn\SEwuY4b8O#)Br͑xqS.i&YuI<["W+]1d:70s+LJ rfx|ю":!,ƚ8 3ǝ"(ȊV#E[qe_r\ՖˢP1m}TiYiJQ+PM 9U=gER\-QZ #!:{"T1ȫM<"t4;nj7>1`y#&!Ȍj,q=k}U97(U3ϭ Whiʩ®戏i %Ķԧ|Vzz9n? >u* ]-M,rA7KF v 9Fq6=c֨{+`rZLw4aAYkK07KҲ[0lq~Y a񜆓^zGcK+%3M?SE殟j9ٲRw..ή?Og }k?czpd\=cH^DF1"WUJS׋K 9FP16F6akk^_G"9a*">?k$dJƽ#\EOU_gM3JL- vL:k":iN5mf0@׼dl9Q>YO5sǎ=y:#[}/FYTΑi '-^jM9$<>A{y ֪* SE 3 $,%.YV&K][2"O)B9ozPxsyȬKvbuΧm\X#KYA噪iST귱 I'9Kv,sHghdkT Dg? !¯li)E֓VdDUDO_US؀t69\iwM1%9~)s}Uk=QU=4/" a_Ќ{U`5_k_OTEOGHFsX#Q^#W*"TDOU_OAhD:ϙб$^"$kUޞDH("Fϒi={խI#ѭOW*"~?>6?oƹ{Q}[DO_O0 {!F9ޱ=F;QTl=Fů{sUZdM&d|UK{&Of{a"9_W#\r/8d\ #I9W#$N{JkծEESb$&h WFEʞ􊊊ܨr`if7!"VEtp5r~ EO_O_TQb=bdh5#"+j~>YֹG"7ֽX5{6+؞5WWC?C﹇?}{}RDY(b%GYlb*Q~0ĭwED0|*b{vGe{F>M75{Z=G1r"r*_TT?+}M⑾jjժꊋn{9 < G2ڞi*f~GF#trQZjAC뇌9n%6j+z||k0 ƔÙV}?:*Iɮ, p0fW.~sP Ċ/es$&jM<=~*j%J Ѳ@խ $d{K;IQyɏ_|);p"B= 'G+=1xEM `V[I'cдjL4)^IGC kW+^o1Qk2evC{s}ksR5 2$Uѥ$M-Rti"VkC]і[5E,#,R!cץ[N1 >KnQ~ď5տMK`YwF˓}ae30/*95uF,Ga+ruӃ&sPUMBCՌwLqKzEH*;>h)f>M^F6J^f+J$Gk }1.샾I Jgoo 7Y 2+!^c5/|>17զJW2ilo?pvO6i+Uo 8 uao^*[8:CUfk #FYN]en;˫Y9Q pTЏHʈĖ6H7+QG#dDk㑨"*/V#0sui1,PdV5$J6V%p6} #r$2B+ 0mؚ%"gb;]r~ j+.xK`AIdE4Mr^o/Jqy\L<ͤDhϲcwK3TTe4@AbKzllx!+1P'F/Ѭ69ʫAr:c -EyHek^ֽ=SkDL̉6oZmrS Y_dn__춾F:ȔYze0$,C{X=ޞzazO?6jŊ ڪk d.0{tGNZ񙛄QɃn2I8O~HѻUEÝ#\ScpI !!`dQzIJ,o`TִVj~0eVIM]b#g&Am15Tg+Uc-]ے) ,VLc^7**ȇ8f>BbHlB&+ )]D潾r*^ZLSWkbBE,5Jas$02IX{=:jr0O ?xԑsVڂq%`4TJ 5TO򹪟P2hcOlp-dPƧ5twZ*DrD-b[H2' 6G{؎?]dR^JJH&(jl_ RF:6=oE)# UU=(#DY-Qc12H{~G"9G"Ꞿj+\ٜ˜bwe̔B Ȇ3>(Z/o9>WUEOg-[e&e9n+i^,L)9+,K3ThW&YC KX>ƒj@[ iks~1\\!DwQVah-K)"db$w5~þ9MJ2506q]6ʹ&iuXdqSn_Hb5}+m$܆&-AuaWk v2Nlr+kpֳc): ˻ +۞JDJ*RS r!H~#{h;+'UJ˫,EYG[FfABSzm.+l՘JGc(-v9 F^ȚlIk7zPnS.?nO/+hRhʡ*0m5 g _ +6ł KL`|Ѣ8?D^e%d֘IwDw0*a $e}kvWP$HjwSLXUpbY6˃w _:Q,,t,rIQs34ƌe\nK:y ϺγH;sP_Yp6|37_E_kv\T DTc{_H#ГOFtR?KL؊튫b*{Jo@XZ9TEip7VYkORtȳ磜7*_PRuuMk} ͍ VRV~*_~$l|r;=h`ey])R"5 3i+Yl:p^hH j-i1 I$ˊC&yl@h5֔8l~bse*.Dʜ1LiQfhU>O'c_qRRSOϛu8Hì*uzľj5dc}J5LdXCcD~KV F9LtRbUUZs ˈvI\'ɷYPZcj\*DW N36giʢVgLk%Iaqz+_ǣlo-~SQ}.뗲i>™M,|Ьt  짭m+ZmК] h@"tUؤI4B>iaۢidC!q-^5Fc#,vT&=n1!wo7R~׫#kdi_U.ڈ/4'ԛ_0n=D266rebDɻ4lGLbh൴'Y{Wɑ2jx+*T(.H(tq]*}soiW]jÒ\૲_z5d1%DzO-\wvsWqвY}xj=k"-s/'je̱Pfq5daըߩEDKRXƬގj"tkN;jv^&tr6EJhVዛ #6WM;k)mB'@@_5*̼GRя4")&gCMb#n;7TZK[U2)hI-Hձ/թgp%gLuF[-g}x̌NyE36SNq G#\\57H[ʉYڵ&y ݕ\euYS 0NCdtj}jt^u[CɃT|C 7j,,r'Սk@PW[Yb1MΦƜEf䲞kMZWȿI;[2ruZR Ei5v: [ +E=S9lzH^5D76ZBwQΡm`]XiͭƦԼCldr69ش쩚 F/krYV:EZ^i/M/9oYOLDa2uDlIz:BSstItDT%_kB'KMHdmk=`xE=evzFv GS>2Ɛ)˳ăd)xHy:Fm@|)2#* pVeޟ5OKȣ/y_>.k|q-pzL 53h`$ fYV.~[㧐t>e' E<>3e;Y)naW Y_6#v<2?BSxG~;|.k1a@aKylKeDa'|[^iS<#?~AÁܕh ՠ3ae`]&gHcR1RX浑QA]U_'xW# endstream endobj xref 0 27 0000000000 65535 f 0000000008 00000 n 0000000073 00000 n 0000000119 00000 n 0000000332 00000 n 0000000369 00000 n 0000000504 00000 n 0000000628 00000 n 0000003283 00000 n 0000003395 00000 n 0000003502 00000 n 0000003618 00000 n 0000003738 00000 n 0000003866 00000 n 0000003993 00000 n 0000004121 00000 n 0000004248 00000 n 0000004374 00000 n 0000004466 00000 n 0000004593 00000 n 0000004685 00000 n 0000004813 00000 n 0000004897 00000 n 0000005025 00000 n 0000005109 00000 n 0000005236 00000 n 0000005361 00000 n trailer << /Size 27 /Root 1 0 R /Info 5 0 R >> startxref 85407 %%EOF phishing « Informasietegnologie
Language:
SEARCH

  • Recent Posts

  • Categories

  • Archives

phishing

« Older Entries
Newer Entries »

Phishing attempt: “SARS eFiling Letter notification”

Thursday, January 31st, 2019

An email with the subject “SARS eFiling Letter Notification” was sent from a staff email to staff and students on campus. The email asks you to click on a link to download your SARS documents (See example below)

This is not a legitimate SARS email, but a phishing attempt from a compromised sun email account.

SARS will never ask you to provide any personal information by means of email. By clicking on links and providing your information, you give criminals access to your personal information and your accounts.

If you clicked on the link in this phishing email, immediately change your password on www.sun.ac.za/password. For enquiries contact the IT Service Desk by logging a request or calling 808 4367. More information on phishing is available on our blog and Twitter.

Click for a larger version.
Email

Tags: , ,
Posted in E-mail, phishing, Security | Comments Off on Phishing attempt: “SARS eFiling Letter notification”

Phishing attempt from sun email account

Wednesday, December 5th, 2018

If you receive an email from a sun email account with the subject “To All Faculty\Staff of Stellenbosch University“, asking you to click on a link to upgrade your webmail, please do not respond and provide your information (see example at the bottom of this post).

This is not a legitimate email notification from Information Technology and we will never ask you to give your personal information via an email link. The suspicious email is being sent from a compromised email account and is a clever phishing attempt.

When you click on links and provide your information on phishing emails, criminals will be able to gain access to your personal information. If you clicked on the link of this phishing email, immediately change your password on www.sun.ac.za/password.

For any enquiries please contact the IT Service Desk by logging a request or calling 808 4367. More information on phishing is available on our blog and Twitter.

Click for larger image

Email

Tags:
Posted in phishing, Security | Comments Off on Phishing attempt from sun email account

Phishing scams requesting quotes and notification about “new message”

Wednesday, November 21st, 2018

Phishing attacks on the university continue with this week’s “flavour” being a return of the old “Request For Quotation” scam. With this scam you might receive an email from a large corporation arrives asking for you to provide a quotation, with an attached PDF that you are asked to fill in and send back to the sender.

Why would an academic department secretary be getting an RFQ to supply industrial supplies like sewage pumps? Scammers often only want to steal information from their victims, and in the case of the Faculty of Health Sciences, the scam RFQ could change to supply something like medical supplies or equipment.

Remember the email may look very convincing, with known company letterheads, VAT certificates etc.

It is important not to respond to the sender or to open up the attachment. Often scammers just need a response so they can identify “live bait” and fine-tune their attack to a particular person.

Another phishing scam that appears to be coming back uses attention-getting subjects like “You have a new message” or “We’ve resolved your dispute” or “SARS refund pending” designed to get your attention. This particular one uses forged “Citibank” branding and informs you that a dispute has been resolved and you will be paid some money, but you are asked to open up a “document” to see the disputed transaction.

The danger is in the document which will be download if you click on the link. In this particular case, it is a document with embedded macros that will install malware on your computer to steal personal information. Normally macros in Microsoft Word are disabled by default, but if you have enabled them for legitimate reasons then there would be a danger to your computer if you attempt to open the attached document.

These phishing scams are sent out to many university email addresses at the same time, so you are not personally being targeted by the phishers. These attacks will continue in various forms, because there are still individuals who fall for these scams, making phishing attacks very profitable.

If you do receive mail like this then please report it to IT Cyber Security. Once you have reported the spam or phishing mail, you can delete it immediately. You can do this in two ways:

  1. By reporting it on the ICT Partner Portal. Go to https://servicedesk.sun.ac.za and select “Report phishing, spam and malware” right at the bottom of the list. Fill in your information and add the email as an attachment. Your request will automatically be logged on the system.
  2. By sending an email. 
    – Start up a new mail addressed to csirt@sun.ac.za. 
    – Use the Title “SPAM” (without quotes) in the Subject.
    – With this New Mail window open, drag the suspicious spam/phishing mail from your Inbox into the New Mail Window. It will attach the mail as an enclosure and a small icon with a light yellow envelope will appear in the attachments section of the – New Mail.
    – Send the mail.

[Article by David Wiles]

Email

Tags: ,
Posted in phishing, Security | Comments Off on Phishing scams requesting quotes and notification about “new message”

Cybersecurity Awareness month: Some statistics and common sense advice

Monday, November 5th, 2018

It’s November and Cybersecurity Awareness month is behind us. As a final signoff,  we would like to share a few statistics and give some common sense advice to help you spot phishing scams.

Surely South Africa is not sophisticated or advanced enough to be included in phishing attacks? According to Drew van Vuuren, CEO of 4Di Privaca, South Africa is the second most targeted country globally when it comes to phishing attacks.

The cost of phishing in South Africa amounted to approximately R4.2 billion in 2013 alone and 5% of phishing attacks globally occur in South Africa. It is not a matter of “if” the university is going to be a target, but “when”. Phishing attacks are not Information Technology’s concern, but should also be yours as a user of the internet. 

According to a 2016 survey by Symantec, over 30% of South African internet users share at least three pieces of personal information on their social media profiles which could be used to steal their identity. 

60% of the respondents admitted that they had no idea what their privacy settings were and who could see their personal information on sites like Facebook, Instagram, Twitter etc.

People often become victims of online fraud by using the same password or usernames on multiple sites, including social media sites and internet banking sites. According to Ofcom’s “Adults’ Media Use and Attitudes Report 2013” report, 55% of the poll respondents used the same password for most, if not all, websites.

Here are 10 common-sense tips to help you spot and prevent becoming a victim of a phishing scam:

1. Learn to identify suspected phishing emails

  • They duplicate the images and branding of a real company.
  • They copy the name of a company or an employee of the company.
  • They include sites that are visually similar or identical to a real business.
  • They promote gifts or threaten the closure of an existing account.

2. Check the source of information from incoming email

Your bank, Information Technology, or cell phone provider will never ask you to send your passwords or personal information by mail. Never respond to these questions, and if you have the slightest doubt, call your bank, IT or your cell phone provider directly for clarification.

3. Never go to your bank’s website by clicking on links in emails

Do not click on hyperlinks or attachments, as it will direct you to a fraudulent website. Type in the URL into your browser or use your own bookmarks or favourites if you want to go faster.

4. Beef up the security of your computer

Common sense and good judgement are as vital as keeping your computer protected with a good antivirus and anti-malware software to block this type of attack. In addition, you should always have the most recent update on your operating system and web browsers.

5. Enter your sensitive data on secure websites only

In order for a site to be ‘safe’, the address must begin with ‘https://’ and your browser should show a closed lock icon.

6. Periodically check your accounts

It never hurts to check your bank accounts periodically to be aware of any irregularities in your online transactions.

7. Phishing doesn’t only pertain to online banking

Most phishing attacks are against banks, but can also use any popular website to steal personal data such as eBay, Facebook, PayPal, etc. Even the university’s e-HR site was targeted in 2017.

8. Phishing is international

Phishing knows no boundaries and can reach you in any language. In general, they are poorly written or translated so this may be another indicator that something is wrong. However, don’t be convinced it’s legitimate if it’s in Afrikaans – phishers are getting clever and adapting.

9. Have the slightest doubt? Do not risk it.

The best way to prevent phishing is to consistently reject any email or news that asks you to provide confidential data. Delete these emails and call your bank to clarify any doubts.

10. Keep up to date and read about the evolution of malware

If you want to keep up to date with the latest malware attacks, recommendations or advice to avoid any danger on the network, subscribe to the Information Technology blog or follow them on Twitter. Put your local computer geek or the IT HelpDesk on the speed dial of your cell phone, and don’t be embarrassed or too proud to ask questions from those who are knowledgeable on this topic.

Keep safe out there.

Email

Tags:
Posted in phishing, Security, Tips | Comments Off on Cybersecurity Awareness month: Some statistics and common sense advice

Cybersecurity Awareness Month: Spear phishing

Tuesday, October 30th, 2018

In a previous article, we referred to “spear phishing“. Spear phishing attacks deliberately target the university instead of sending out general emails, hoping someone will respond. This approach is successful because scammers focus on typical staff and student activities and adapt their phishing emails accordingly.

Over the past two years, the university was targeted with a few large-scale spear phishing attacks resulting in student and staff accounts being compromised and in several instances, some of the victims suffered financial loss.

In April 2017 an e-mail was sent from “Stellenbosch Payroll” with the subject of “NOTIFICATION: Your 13.69% Salary Increase.” The bait of a 13.69% salary increase certainly attracted attention and was sent at a time when salary increases and performance bonuses were being granted.

Many people overlooked the lack of a personal salutation and the grammar and spelling mistakes. The lure of a 13.69% salary increase and possible sizable salary increase made them throw caution to the wind. The university branding also created a false sense of security. 

According to the email, staff had to download the two attached documents with information on the salary increase. University staff clicked on the links and was diverted to a forged website identical to the real login page of the University Human Resources division. The forged website address was not in the university domain but very few people would spot that detail. (see below)

Once on the site, they entered their usernames and passwords to view the documents explaining their so-called salary increase. The password did not work, but the scammers captured usernames and passwords and gained access to the real HR website using the stolen details and changed the victim’s banking account details so that their salary would be paid into the scammer’s own account. The person’s bank account details were also captured and could be for further exploitation. 

 

A second spear phishing attack occurred a year later in May 2018.

An email was sent from an already compromised UNISA account. The mail warned that the receiver’s email account was due to be deactivated and that they should click on a link to renew it. The Subject said “Dear SUN E-mail User (c) Copyright 2018 Stellenbosch University” and the signature was from the “2018 Email Microsoft Administrator”, which many saw as legitimate.

Clearly, the spear-phishing scammers researched their intended target and used words and other details like SUN, Stellenbosch University & IT HelpDesk that would increase its legitimacy.

The link took the victims to another forged website. This time it was a perfect copy of the University’s own “Single Sign-On” page students and staff use to access important University services, for example SUNLearn and the staff portal. (see below)

The website address was also not in the university domain, but  the rest of the details, such as the branding and the Afrikaans link,  looked convincing.

Once the victims entered their usernames and passwords, the scammers gained control over the user’s accounts and could send out further email messages from within the university to catch more victims.

What could we have done to spot and prevent these attacks?

Unfortunately, there is an institutional perception that Information Technology has to prevent and protect users against attacks. This is not true. Users of an institutional network or even private users have the responsibility to be aware of the dangers we face in cyberspace, to sensitize themselves to the warning signs, be informed and help Information Technology flagging suspicious e-mails by reporting them and not using weak or easily-guessable passwords.

Here are some common-sense checks:

  • Don’t trust display names. These can be anything a scammer wants them to be.
  • Check for fake email domains. These will often be slightly different versions of the real thing.
  • Look at the university logo and other images.  Are they commonly available on the internet?
  • Review links carefully by hovering over the link text (without clicking). A link that is different from the one in the link text is a sign that it is malicious.
  • Look for the sun.ac.za domain name in the link. If the domain is different it is probably a malicious link.
  • Look out for bad spelling and grammar, as this can be a tell-tale sign that it’s not a legitimate message.
  • Spear phishing emails and messages are highly focused and targeted.  The criminal will spend a lot of time compiling emails and website to look authentic.
  • If you are suspicious about an email don’t visit the site. Verify it first by checking with Information Technology if it’s legitimate.
  • Use strong passwords and never use the same password (especially if it is a weak one) on multiple sites.

In the final article for the Cybersecurity Awareness Month, we will share a few thoughts on how to increase your cybersecurity awareness and give a few tips and suggestions about what the university could do to fight and prevent these attacks.

Keep safe out there.

Email

Tags:
Posted in phishing, Security, Tips | Comments Off on Cybersecurity Awareness Month: Spear phishing

« Older Entries
Newer Entries »
 

© 2013-2024 Disclaimer: The views and opinions expressed in this page are strictly those of the page author(s) and content contributor(s). The contents of this page have not been reviewed or approved by Stellenbosch University.