%PDF-1.3 1 0 obj << /Type /Catalog /Outlines 2 0 R /Pages 3 0 R >> endobj 2 0 obj << /Type /Outlines /Count 0 >> endobj 3 0 obj << /Type /Pages /Kids [6 0 R 13 0 R ] /Count 2 /Resources << /ProcSet 4 0 R /Font << /F1 8 0 R /F2 9 0 R /F3 10 0 R /F4 11 0 R >> /XObject << /I1 12 0 R /I2 15 0 R >> >> /MediaBox [0.000 0.000 612.000 792.000] >> endobj 4 0 obj [/PDF /Text /ImageC ] endobj 5 0 obj << /Creator (DOMPDF) /CreationDate (D:20250701130134+00'00') /ModDate (D:20250701130134+00'00') /Title (Report 07-2025) >> endobj 6 0 obj << /Type /Page /Parent 3 0 R /Contents 7 0 R >> endobj 7 0 obj << /Length 2311 >> stream 0.702 0.800 0.816 rg 34.016 34.016 543.969 723.969 re f 1.000 1.000 1.000 rg 45.266 -7.273 521.469 754.007 re f 0.773 0.773 0.773 rg 0.773 0.773 0.773 RG 45.266 746.734 m 566.734 746.734 l 565.984 745.984 l 46.016 745.984 l f 566.734 746.734 m 566.734 -7.273 l 565.984 -7.273 l 565.984 745.984 l f 45.266 746.734 m 45.266 -7.273 l 46.016 -7.273 l 46.016 745.984 l f 0.200 0.200 0.200 rg BT 61.016 693.716 Td /F1 14.4 Tf [(PHISHING SCAM DISGUISED AS THE UNIVERSITYS SINGLE-SIGN ON )] TJ ET BT 61.016 676.134 Td /F1 14.4 Tf [(PAGE)] TJ ET 0.400 0.400 0.400 rg BT 61.016 647.326 Td /F2 9.0 Tf [(Posted on )] TJ ET BT 104.045 647.326 Td /F3 9.0 Tf [(January 01,1970)] TJ ET BT 173.588 647.326 Td /F2 9.0 Tf [( by )] TJ ET BT 188.096 647.326 Td /F3 9.0 Tf [(IT Communications)] TJ ET 0.153 0.153 0.153 rg BT 61.016 619.837 Td /F4 9.0 Tf [(Due to the vigilance of an observant personnel member from the US Business School, we have encountered a dangerous )] TJ ET BT 61.016 608.848 Td /F4 9.0 Tf [(phishing scam being sent from a )] TJ ET BT 193.073 608.848 Td /F1 9.0 Tf [(compromised UNISA account)] TJ ET BT 319.595 608.848 Td /F4 9.0 Tf [(.)] TJ ET BT 61.016 588.859 Td /F4 9.0 Tf [(The Subject is )] TJ ET BT 120.542 588.859 Td /F1 9.0 Tf [(Dear SUN E-mail User Copyright 2018 Stellenbosch University)] TJ ET BT 404.258 588.859 Td /F4 9.0 Tf [( which should immediately raise )] TJ ET BT 61.016 577.870 Td /F4 9.0 Tf [(eyebrows. The phishing email warns you about the pending expiration of your e-mail account and prompts you to click )] TJ ET BT 61.016 566.881 Td /F4 9.0 Tf [(on a link to reactivate it.)] TJ ET BT 61.016 546.892 Td /F1 9.0 Tf [(See below what the mail looks like:)] TJ ET q 375.000 0 0 231.750 61.016 303.944 cm /I1 Do Q BT 61.016 286.153 Td /F4 9.0 Tf [(The danger is that the phishing scammers have perfectly forged the universitys )] TJ ET BT 379.652 286.153 Td /F1 9.0 Tf [(SINGLE SIGN-ON)] TJ ET BT 454.163 286.153 Td /F4 9.0 Tf [( page, that is used by )] TJ ET BT 61.016 275.164 Td /F4 9.0 Tf [(students an personnel to access the portal pages, the my.sun.ac.za page, SUNLearn etc., as you can see below. Not )] TJ ET BT 61.016 264.175 Td /F4 9.0 Tf [(many people will notice that the address is not a university address, neither is it secure.)] TJ ET endstream endobj 8 0 obj << /Type /Font /Subtype /Type1 /Name /F1 /BaseFont /Helvetica-Bold /Encoding /WinAnsiEncoding >> endobj 9 0 obj << /Type /Font /Subtype /Type1 /Name /F2 /BaseFont /Helvetica-Oblique /Encoding /WinAnsiEncoding >> endobj 10 0 obj << /Type /Font /Subtype /Type1 /Name /F3 /BaseFont /Helvetica-BoldOblique /Encoding /WinAnsiEncoding >> endobj 11 0 obj << /Type /Font /Subtype /Type1 /Name /F4 /BaseFont /Helvetica /Encoding /WinAnsiEncoding >> endobj 12 0 obj << /Type /XObject /Subtype /Image /Width 500 /Height 309 /ColorSpace /DeviceRGB /Filter /DCTDecode /BitsPerComponent 8 /Length 25063>> stream JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82 C    !'"#%%%),($+!$%$C   $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$5" }!1AQa"q2#BR$3br %&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz w!1AQaq"2B #3Rbr $4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz ?&A3W9'ַ<3w{cFzXnC5N?~kV6vKW/ x2۸?Z)/dR*o2Kk}=Vv3γB[mpQO;\$H$ѹ|nNV0sm0fiUp OZYH*&6#~ۘO^(/}J:%ZсR)g2#u-ycGл&K8LB@?^OL!8#vйN~f7b̬ȎsDJ/ϻg;F{]jS n%(@6HP0Gow=92!nSjSRJ΢rvn|礟Ѡ/4bӑv3?Λzh}9c=yWtQG,{qtG/(vi.奶feaC<[{B+SZ뗖l(esDZRI(X˹ 8 >u#9rcIVEyk 'g{^^ Prz{R]XqIW3*w6B.2K*/>lI#,jܺP6B*08x-L=i<{zHn@?x?:l|jkw-#HV"̡~8#}߈.7]Qg:fSdRR<҉EF[q32LJHxt׾*[ol!2OS9_a.r3glp3*H h?nEpr~]\Ѣ"Ē14__ʢRu ;)UM5Mx=*clDX@ۀx9>TnRe$;1fW<B2H+wM镜4W;kOPˌeIz`5ݑnqZ9_34IpNɟH1e_88a?UvOdn:{ k^t0‚Xg\ME*<ˀNSu#mFcWė؄CdyJU5p߻^rC37ΛzjS"}qEVp6P#=<7f2 ˒psɦzI!<ی̓95'WVb:nR{KyIbXUm-YI?ʆ俙QwhOFHx}}5uWfIcIK&tQ#!F_ƞ!&UuT9Q.9̢D7yUNEg_j |Z73]ǀ;T{N.hh~Y]<.xA4yW39${YwM=_4yW3J9#^]<F:oѨ裒=K'7ՙ (j98U+\T'إQ崟ѥYgsB5QIw%i'C@4tQE>Hi.22K =Dgz}* @G.E=H% 3ܱ)i\ jJAVr I˹c4Ǐ~n )?Q^MXwRZ]/vD&%K<޽voy PH|_&y$~Bʹ;Seu-:\ubW1](o ƧW9y=֛%<~Syg> %N77׍Ib֫]X^Kֱ]7:b麜^`ykZ´j=1ʞ4h6BYb`L]QqM/7`G p Y;Op2j^U2yoI +饞am74SA:^}t֗ZˌoYp`b(Y†ߦS(W^_ys^~xQX6 bT'Œ&@#_y}sE{k/%ƫ1daW">'Q?Ih;Y%?G5]Q1W? H$_~zfxM{#9'Œ2:+}i-=?M? _y}ҾoRϩsMW|2Oqڙq?eGok}sG5||Tsj(o }KUa|?W|׽>g.QK Ï?RX0p/9{#innw; ?kSowL9v y\qS|+#׿ HR*FAoU,Q>r4ϟςu-ge’>/dLM%_?FkP>1M>x&`K\yv ӷ]7羥W.~ 2)QMA=, 7<+P>‰RU3(?4< _y}sG5v| u2~<]?,>~5_&?G5b.4-=/M_??Wxe&&wVY oo-VA!(== e&SkF)3p-|VԑLc&BrK)e twAfE) cy)XV KtٶiOLcך5,~M@q8z֥hVzm$k<>+8vXl.u2GpT|0V q@kwCI,P4A2LpH=oH-%D|ygGMan[N- 3p>=8\y!Byu8/ cJ@ْybwHP pHҴO dtɻ ^zcNV7n^%!52A*i83F^W9sm]d42rwdg[5/F'*gdr}i[+ ۡ-IkjKV #.#Hh7^]BD\-Ė@&Q)Q&&q &6?>MzAug$tNC }ק#ޢ]>t#ipv1T nsRzx"$:2 +3+q8u=m#$K1GO=k^.?hJ >lI-,pF*߰06cj{Zt*@i2'Qz44Vb F$# g:QM*3qZ&"G:%IDgIF9z=$VjfpvS3$Fr0)-O!YqVo9tdK׮m6c˂GL|f|I,/{u﷯N}u$Q6{88$~f4dԇTd/L %QTM8yda}A_Ȭv F{PtF u\}(.HS{VYf 8I'Tzb;+A~TMk⦘Dx!Ȩ6'C]gOujFhʺlSju?0$;:khzrp~Yeb1bEw z !;P+Eqj NuTn6=E{J'C4M$&P$Uk+Ki7@\Ϝ !T-Δ)rEu$]}lY$@5T[dkcX2w`)'\%Oup' 1b6 q)gdYsA^~];}0w=5HmĵZ%LL3ddHqzMmEj!R\Iz* |Gi0>]́xq>vvC:]xqJ 9]ޘ昬I>~?ʳ5(nax$ H+ִ߆L*uKɌ?jT ˵');lUV)@7 Ԃztڛ|T50ϗ csW(`yuXQK@*b '⳶ /͈8p}qI˝JDj-Q{/xA* 2l]3,[##sօ0QzbÒ`l2,Znp#pOM4aaYǔIM 둂89c _r25N<l6m"FgJ=fm;v-REUB^][>$y#f М{֖J3[I{elArt).J.9#9OL._s<|,Å=}G$H##8ZVdRdqp+d &HJ08?Z_?m\,UnJsܞ?闫5pR!\=Ƿ|Vj;ho x.#D27F9M'CѮfH&cr`=OjEܡbJACc${eXi4 8J秧Җ=FR.&6(l`qҀ3tc!&r$ N9> Mef[ Ll}$}:P"F]UXWP-_Vnnn!xL XsZ3X,Xzg>7ø`wo][_"&E;1|pkQ"0Bm;ˈ KkZ{k[gH $^ m_)hJ+)B:Tt{kGlWK@YU2#J1ۆq>Oh@cG6zo!q`6A\q:l\ &9O1'^6COAׯ&3u-,İ|1F㚌k!` 0F/A$o%ɅD%(Α{s}le6o`#$ǠXI,fh3s늤H =y)w,<{X9 ",VXFA yhzqo2 f.ޛ5$Х`,`csZ_f4}4sTVWD_?ѠMq8ʌq) m) 2B"Yh2H3@wcI.gfwiZ\KdUfm7 #nLk`AiÚJ\i5 H0K `K`A#?5"[ݗ1nps4]>W+(ޢjq,r43clVL{*iR,J1J@qwBHѣTi3|=ZؖKIMhՐ*=X4+K&(H<8jΝiz!grHۡio 2Xm tbrM$l.Ra?1D8?7#jwސb.Gis#YP#<1=2y|%cv5ķRtU tk!%&O֏Kk0뱂#F$8A֝5#ŋ] n`98ǯހ4My?Z]?VF-Д9CN{L#3e;{8 e?Z̓vO!v7!xޞ~8c3WG۷NSN$AxVdg?7#_zxBAަBIvqYս-U9 ? mŎ,^Fey\I=6S40>7hޏ4KSy?Z>7QR֏Mj&hئ~}_GH Rޏ\is E!BA95FEsZ,KenN/P꟭W]GtnWc.7߽޵ _c~N|`L A[4P;cۈAU.NH3֥|4T5JG!@$HY??ZIkwlnXԢ9}3Gf'{sջ =:qN2O$cVGRO֫OCsqBE-rNk^aD \#EX"Bj( 4__䵑[7ת!OLJ÷KB9y_YfpcO$tfPp  a \﹍ ;U$[ME$h# 6lΪN\9F8G?=z%oP{Nhx%ڹLujFg(<$~ef4KIöwʾ[hlâ 54!pQE7U1eݮƇ9E;֕]Jx S2۱  8yZZ5ݬIfbg\<'Quʡ@@)q@xKj prz{^:Үj:gNu@8#Wg(m{Lܭos@Rvp -ֿwERT "B@X$c#k(,aICKnP8qׯMA#'Ya, |fpxt 7g,x9]oywL%]~^ Cޝ >hN*>9~UU_*#x?twKgoIM-r9;u#ԏʓzWǺjZ[P w ㏗xҟjO,iÝޞ{O/K}Hl '9r VH̉c @\9 `\3|:Mb? yma }p}Z]ގ_Z<> jJ#/N0:jeJR '?-}/˺y(Wָ/O_+6:Xvl;s靽j_4[B~?9gե}|WָCeeNyjlqp*Kjz槨 ZgޣOSyGE3OQ槨@ Sy}5?GE3OQ槨@ S֏5?OSSy<@ SyOSSyGE3OQ槨@ SyO槨OSy<(jz5?O槨OS RMA.Ee|$@:0p=+X8AqPqzP7? E\Q.u8КƒHA*[3` \iەëNkwe$1H!zWz5r#8'7!{mr ZVK{rʱ;wxf+QMPz_sH#Ԥw?.0F:`BkmWGX]jh D-KDbق۟uXо&5~a&CH@wx=?']|1O)$+H`Bwe#NxQN.zDRxjѠ\914u+ U@=9k[Wkvq GG+ʞ&.>K=uWUddæFN9>j6:κb-$$d )? k_ Mq=Ƶs\n[*Ъn⭎y^4{O O5۞VhkI~1qz޿S ֣s} RFS!&{/;Ew=ڢ7Y$,izE\iuz>GTȻa70}sX,;/#F @]W#ڜCV`Ew<c)5I-9BT`:27p~@{k&5h ;/rF&ݯ }E1 dYX,?1^8ѾEM5_H8"گcmZ~dW c޴x{k/W96ZG+G!o1%䑎1VVy%gER@w,poLM<A&JYFѧ' #Ǧz|]Ƒt =/ hxϷjjkLp x;=ҵ3sosr- {t<2*9l.TںƙIY9s43' |N=vb@E Xdr=>c$Zn EGG$=;nzmMQgědeTٿ<Ȯ^>y#ӭpxWXch7+n&&#Jm<2W灞J:xn#Y y ]$^!x%T==1rZڬ7. G$+, ?6Ak8MVK[Dvf,ಌ/=Z-Tb6f'a2O5TPk/N]J!z.[wR:FW84NrRN;7n eVT\dN{Uk{O>4ۿSqZ^ym<'NveTaFG U1gF1ܣ:|t$PM.imZyw!*T[I*DZ*?ɞN0z3M#L|QEy@WTUʶ_f_/4ٖ'ךcK]2ca<;3 pEjoԢйO6Rc T C%G[vi 1xL /ռQI/%#7F7\Oi:eY}e!PK0:;mƔ\"i3z*2UټwC9 AP>9J\R0}w$Ƕ(9OM)&=# Nq$8nWl*k; eԴ8B n\vd9qRxKEo8Baیl =qe7J;.u/&GHF˒9 =4WRQvJx*!~P\5ď]RJcqT8"Br>Q8PQ\c7I,5H#)ʅv)Ei.ȉbȀI&:1 4i~0{M=SV p6#i73+@n f{m$yW+ז)ehVcE, HJcw9b; .s\jhwp-0Da1* >ŰK5T36hUSpB*>SIn{;Vf48uN8]V'p;@}&k69- h- >|Nhx|sOɐ6=r(4i7?Pd8iJ3npJH'kԌCKGL] 9'9vZi>3ӵXP{Z% TF?('/--^$Nzps#z]i6CMF4"Em^NB\R.jʩN+۷ٳA՛7@k#%*9(WhA#'g#+<^F d#CI1@e5R1F<<3ǦӜ:_m]r2WJG|g`)!t߈ f/[Dy#s3뚅1,]Nh&yϜ] 0PG@9@lNk46:}xʐ6 `SQfp+¨'~J܃(N"[ QKV@}00%N1)D[4?yvӦ|{uwW%cm~ H%ȱBFI+#~r[CRqЊ%HTFݸA-Vgk9w6QK(//_Ue Ί^_..M P_81L^FA/&[p''d G,?}}Q΃{KōwPl*Hf$?v_[Rk\9-"0 ¸Nqaj )_Q΃{Ev-$uq5uiK&+9m}7_UeG:A7{MfR}b[#Ӗ% *M ֋{e?İSH#8Sא:SaI@/*X2j+éɹZxI_ѲHsTR3wS$5+**y9j8Fo$?4E5M:5*g)&EJY_3n|.LE;8lMK \'QLǀeէi&//nA'9qU!g0R^,{7_wtP o#W)5vr9_7V$ a\x=k15K/&w|I=?RkdQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEZzU#7P1O E\QO E\Bj(máA-E'PXS J, IU3#*eeA T@c)ҨTJURbfbZx;-ϗm6UQHxKd-T]eXe=1ڵGo8?Go8x Ie+$W<|ۻtǥYJlI,.z?<{?MEDWh=?bxMe[${h֯ix9б-M0q'svF?9Kt׳A!??3")g$p %#I9sTz杧5wO-4PɆ O=KvGo8O!??2 C_,Vrb/?S-T^jtdDUPb~\?;Q?;SXG١{ʵoZ|w9ͷo=:vfl!>AAc#yZEE5H=?eþ pa;Ί5n`x{EV~yFpɰ!H@nϭm_ķP2kWX1z ut&Ȝ`+J!G2sa㥠}vf!vIq \Ӿ!Qԭw`(;(9k?-͓0v f1r1ԀMҙ=)b! emHTr{Ey|o{ukq&h P݌=IV(Ρ@(pO!xRzZ*(ӼsG^DW( +gn9yk]&qmol֠PJLI叠x]mfxȿY]FQ;ڻGm^լj[fTHJwy ({Ois e!t%Gͻh+ɥ폊_m5I` ;lۨ.(έov62[A[I3OL$Il率#*ݾȊA|$Ҳ7p}Pxr-zgl}:{t "7a(,8=H+Ш~6PĖ~e"R1/L 9=qM}iY[&xә6P6H=x8Ί-Y _A$r$1|I$`dxK -̄GR@zxٴ&%X{22df!mW,3~lv+Ш6zE#7,# *#S$ζ$5qMn촒0n;W_i>5k,ߤ̲庮vr 7 Ā8i?α WBPHRAX>5*9iC@ (ܻ!O*' Vxwa`onv|WkEpcV/mܳe c+# sSHtXk6S;\qqΊ 52eHe cׁJұԅN 1*[WeEyq/-I7NxH}xZf\R`˟`qZ(vK2LC bzG6k_E;um$+fʈOر3#vƃȠ4  &^%ܶ9mx8/I5[ebHc`pI`qW_p(hJ,&Ŧ)6nyJ?7g Ɵ/PSqY`uSIe{*4Q@hLKE%PQKE(((((((((((((((((((((((AMZTBКa Οcw-Յ)dU0`yT6)*ZŵyoFu$cjY]xK61Kl 1,%c8^HeV*U'8B?Tka/ws_ZOإͳ d,wFx gM\ŧXܛ+ΆK, F?1%jܚZ2i Ї21tqQcHZf60Tu<}iGM'M߫+Rm#&nBɄ@uTg^ONgA>iAf e; &;TƮ4;H>#<ki+Kl2'd:n|jk%4l#"KZeA<5"ηE8 >Ljk-3:NҮnT]9'9{ވVݹA & YʅQH$'>6W,;Pb~m0"암 ~޵֟zMM89pp'= &@u 0upzR6p`yl^EWnmz|['3̲! 8ۂCd8kŢFݹ8Q AZ煶P9On nie-mk{+GyͻbqyOZ땷 Ӽ;Sy:mJo 2;ִb*՗EVc ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ?7@)o@ύ?)p_ Ɵ/PQdxtER𦟨:3Hn/(㿭]43Npԭn.a;آaqހ1 A<ӯdv1i;osRit$IY# ǐAO9WBEFh\71Noܸ42wԅP}%σ-;^ǰYB^3+dj/8\b7Ϧi-;KĖPLޙ+LV-帛E+js1'M2i&P1+d]FcI< A>BnVѮa 2#.@W{id)}pKWL#ch`z󼟭tsJF^FTQԱV4EHi#+&6{U?vC$% 'v$}J~E" Z((((((((((((((((((((((((7jP o3O E\Bj(" 5:Ux\3Z)n-不_kg+ύn0w2{4ī7<+Ǧ@)_0]6( 1F#ڒ?x%IewNAV$e+/]x[ɲ_(*,> ܀ z=gm4=T6@qAps(+3N[V*Yo`ɕHXs*J|9vNf^H+Z·P]M|>|.,vQR s?"-kicʧ`i>^3c߅|Og͎-ТHrJ>` GvA(o)sI1fQ,p@ϹC⫛y%Kr$$ m.EgUsUAlKSI441eR7r34N0H3&NA2NỒGn1]քncH/#uTf.\Hv'3\M/T9VI#Vn8}վk: I[0ѱO0yrTuwouH ۍnD8mrюH/Z^] l0H$\g8q;:)ȥ(((((((((((((((((((((((7jAMZ|i!HME4_&:}3*QOEs_568%dD!22zs;GJ4.?Tc R< K$}@-=2{I G].q׶cofd}6C!|h ?v$#wL`MuZZۀd`VޫZgM[T;X(T68Hd@ mm`>n~ʸ`#{UtBo<)9-x˖bZ|]^s=jԚUѴrZ[>7+F8鑎q@\>'֖s$VK22儛)_Jw%ڴ^,Fu u)iJלpsO8KxSyg;# Q7 J` i2lWyk}2E*ֶpcvk(7у&%ŤOZD.S3s]Ο+\*\9)L H v :v1#UUT : xQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEU[֯A}8o7oLP_)p_ ƧpQ@ӼkX['3z?٫?oƊ(?#4uPEoƏN7cEt?:FhN7cG'_P Fh?#4Q@'??#4Q@'GoƊ(?#4t(oƏN(@ FhN?:?P Fh?#4Q@'GoƊ(@EoƏN7cEt?:?P C7cG'G?:?oƊ(?#4r(oƏN(@ FhN7cG'G?9Fh?:?oƊ(?#4t(oƏN(@ FhN7cG'G?:??#4Q@'?!?P9?-rBfQE endstream endobj 13 0 obj << /Type /Page /Parent 3 0 R /Annots [ 16 0 R 18 0 R 20 0 R 22 0 R ] /Contents 14 0 R >> endobj 14 0 obj << /Length 3695 >> stream 0.153 0.153 0.153 rg 0.773 0.773 0.773 RG 0.702 0.800 0.816 rg 34.016 34.016 543.969 723.969 re f 1.000 1.000 1.000 rg 45.266 210.682 521.469 547.302 re f 0.773 0.773 0.773 rg 45.266 210.682 m 566.734 210.682 l 565.984 211.432 l 46.016 211.432 l f 566.734 757.984 m 566.734 210.682 l 565.984 211.432 l 565.984 757.984 l f 45.266 757.984 m 45.266 210.682 l 46.016 211.432 l 46.016 757.984 l f 61.016 226.432 m 550.984 226.432 l 550.984 227.182 l 61.016 227.182 l f q 375.000 0 0 260.250 61.016 497.734 cm /I2 Do Q 0.153 0.153 0.153 rg BT 61.016 479.943 Td /F4 9.0 Tf [(It is imperative that you )] TJ ET BT 156.056 479.943 Td /F1 9.0 Tf [(do not click on the link)] TJ ET 0.153 0.153 0.153 RG 0.18 w 0 J [ ] 0 d 156.056 478.514 m 253.580 478.514 l S BT 253.580 479.943 Td /F4 9.0 Tf [( in the mail, and do not provide the scammers with your username and )] TJ ET BT 61.016 468.954 Td /F4 9.0 Tf [(password as they might be able to access the universitys systems that are accessible through the Single Sign-On page.)] TJ ET BT 61.016 448.965 Td /F4 9.0 Tf [(Last year scammers were able to forge the e-HR login page through a phishing scam and several staff members had their )] TJ ET BT 61.016 437.976 Td /F4 9.0 Tf [(bank accounts details and other personal details exposed to the scammers. In the light of the issues that Tygerberg staff )] TJ ET BT 61.016 426.987 Td /F4 9.0 Tf [(have been having with general network access earlier this month, and this weeks issue with e-mail, the arrival of this sort )] TJ ET BT 61.016 415.998 Td /F4 9.0 Tf [(of mail at this time can fool some people into thinking that it is legitimate and lead to compromised network and e-mail )] TJ ET BT 61.016 405.009 Td /F4 9.0 Tf [(accounts.)] TJ ET BT 61.016 385.020 Td /F4 9.0 Tf [(Heres how to report any phishing or spam mail:)] TJ ET BT 61.016 365.031 Td /F4 9.0 Tf [(Send the spam/phishing mail to)] TJ ET 0.373 0.169 0.255 rg BT 189.077 365.031 Td /F4 9.0 Tf [(help@sun.ac.za)] TJ ET 0.373 0.169 0.255 RG 0.18 w 0 J [ ] 0 d 189.077 363.880 m 253.742 363.880 l S 0.153 0.153 0.153 rg BT 253.742 365.031 Td /F4 9.0 Tf [( and)] TJ ET 0.373 0.169 0.255 rg BT 273.758 365.031 Td /F4 9.0 Tf [(sysadm@sun.ac.za.)] TJ ET 0.18 w 0 J [ ] 0 d 273.758 363.880 m 354.920 363.880 l S 0.153 0.153 0.153 rg BT 61.016 345.042 Td /F4 9.0 Tf [(Attach the phishing or suspicious mail on to the message if possible.)] TJ ET BT 61.016 334.053 Td /F4 9.0 Tf [(1. Start up a new mail addressed to )] TJ ET 0.373 0.169 0.255 rg BT 205.088 334.053 Td /F4 9.0 Tf [(sysadm@sun.ac.za)] TJ ET 0.18 w 0 J [ ] 0 d 205.088 332.902 m 283.748 332.902 l S 0.153 0.153 0.153 rg BT 283.748 334.053 Td /F4 9.0 Tf [( \(CC: )] TJ ET 0.373 0.169 0.255 rg BT 307.247 334.053 Td /F4 9.0 Tf [(help@sun.ac.za)] TJ ET 0.18 w 0 J [ ] 0 d 307.247 332.902 m 371.912 332.902 l S 0.153 0.153 0.153 rg BT 371.912 334.053 Td /F4 9.0 Tf [(\))] TJ ET BT 61.016 323.064 Td /F4 9.0 Tf [(2. Use the Title SPAM \(without quotes\) in the Subject.)] TJ ET BT 61.016 312.075 Td /F4 9.0 Tf [(3. With this New Mail window open, drag the suspicious spam/phishing mail from your Inbox into the New Mail Window. It )] TJ ET BT 61.016 301.086 Td /F4 9.0 Tf [(will attach the mail as an enclosure and a small icon with a light yellow envelope will appear in the attachments section of )] TJ ET BT 61.016 290.097 Td /F4 9.0 Tf [(the New Mail.)] TJ ET BT 61.016 279.108 Td /F4 9.0 Tf [(4. Send the mail.)] TJ ET BT 402.934 259.119 Td /F4 9.0 Tf [([Information supplied by David Wiles])] TJ ET 0.400 0.400 0.400 rg BT 61.016 240.630 Td /F2 9.0 Tf [(Posted in:E-mail,Security | Tagged:Phishing,Report Phishing | With 0 comments)] TJ ET endstream endobj 15 0 obj << /Type /XObject /Subtype /Image /Width 500 /Height 347 /ColorSpace /DeviceRGB /Filter /DCTDecode /BitsPerComponent 8 /Length 24399>> stream JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82 C    !'"#%%%),($+!$%$C   $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$[" }!1AQa"q2#BR$3br %&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz w!1AQaq"2B #3Rbr $4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz ?׎4("}{SX,m'$xսm帎K(n\GzW>ۛ屑4vj?i}gi(l.I Y$t[M|bKU<̈zGSXνW͹&t_nӿZ_k}-rh>ty\a%3qԎ?ƫi5NH]s/e/Ge;~-北wZk\kXMKc^5TOQGE:XoyQqO[oyQq?OI>f7ʏ|<ȧQw*?'(~B(T_QG;9c|ȣʏ|w>sNaT_QGE;J9aT_QGE;J9f7ʏ|<ȧsG>X,7ʏ|<sG>X,7ʏ|<ȧsG>X,7ʏ <ȧsG>X,QqG}(ҋQqG}(ҋQqG}(ҋQq?G}(ҋQq?G}(ҋQq?G}(ҋQq?G}(ҋQqG}(ҋ"ĞR/Ž-^3#hSҌڕ!/3h$%Hƫvn0XFB'vIqW҆9F=!lTAIwei078h2ysnJkhbF>ΙE=Gz5qhV3rW|A6d]S"jݜ p㎙޿k~,]XʼQ[S]wV3]Y߱'v)r鞵I>gi%-.dl, c#:] .c 'ҥf#)}U;}R7{vY6p8sd㞕Y+BrѝZ ˨/P s>ijij߲ ?e?߆ 9p_c O ? M ou ?ϸ}b1Z'Z&7캇GuŽg>W-_~B-_~B]Czo캇G3XwAI!GAI!M.@C7Q]CzoTf;KWߐKWߐP^~(.@C7Q*3RoQRoS~˨+P }P^~(}?)7()?)e?߆ >˨/P s>ijij߲ ?e?߆ 9p_c O ? O ou ?ϸ}b1Z&Z'7캇GuŽg>W-_B-_B]Czo캇G3XwAI!S˯޳-̥Acz`uW4[LwhVKge`Aǯh}?ޱo'u  GHF.$9K$-sJlv,Q!/@Jܹ${ϸ}b3gLyhXMbxDtee`h&j; ;QנbiG]kϘ^}:L3RsF)(@%V QXH(e:8FPvj[! KM4zQIE;`RfJԔQ`b41F*-,瀣Wоe.>Ed.RT j++B| )*֥ϔ/@VI?/K Z++B|>>RTEeh_ϔU&iRp (Zb ---6h--74n@ E&E&I2hhRfIE-4phɠ4xuO}ZOsQkQ]ci| ߃{@wܚ3ƗMjNq٥32hfFM?4ܚ2h٢G43Mɣ&)4s@.i4s@4hɠfo4dI)4dl?>۹ڄnZx_ ?s?V8R}F^yrR\Bľr  Wn;HdvN6 #!T0P~Tpr} )CJ'{ VAmj7>r־t/}ц:B.SnO\ ̼K+-# f>NYWu$eqf.v>6pz_NX+|5BjS劒ٜEњo4d&72hh79撛4њnM;479|A!GѭE _s֢i%w iG]9l_.h'jLFivh74sFi &h٣43Mf$"R:TK{jn`f=hȨn.8c^#5 ߣ=®K4Rve̊3Q*J$n2 cSBsFh٤'J(+\Ǵ3lRF6w_ VqJіi ( ?mͶ>i0QЉ( Ϙ.Hfdڊ\O$N8?+ Fw` 6aFifLfsK@ 3MfRPFi ;4gJJ_<Sj??j+;[K^|!?#݊hwkϚ^QI 4M(4M% \sJhG)MC >s\O*h! 8λoȩ1 ? j᳚X( FFȧ[跶-> o?Nԭ#~X+;/篨o? {aV;B e\qza{[Ēxj37-I̒t% #iGǟxbth221rT1GҦdw"'Cb OK){W0;;c=9qwqISsFhOi3 6kC/\ld a&E >ns4A/Kd#gҩfXΒ|ϽHUmX}:4Y<ȕY_LsVH.<}+Z(F:bG=kY(d^j&\ϓG+2.dQo(U7Z9Xs3FjڮɿW?ha̋WRʝot;ceNz6Ϳ NM,[R?j9bILHywy/|TOt10ĭxA\ _ƽs&Ŏ;%?*~xO_N]4+]FQ"q/^w\?J_(\L8x<`^=vW[uhf8wؽNC,m;L"'s*4J cm<;gx3,M;V>JWĝYNt袱;eW=rӯA[M޿Kg0> jzH99 "1QVFͷ:i3&ip4) &hZ3M-Ps@ 2))3@='}ZOsPkQ]_=+i%wy'/i%w9:>giz&i58њnh;?J\3Fh٣4њ~i3MgFi4s ߂x3xU9mV/ D.Au`gjb +tMKQf[{#+JY#bṉMjG춎@a@$`[Lֻ@a/|tʱG)֧m8cKom,vjׅ.tK.Hh$ip:~ -\7h^ݽd7 5fPo.i3Y;Ҍ)4vh'nhS3+b_/ƱYom@3Vw.4x AŭL?mi>lȪЅtf {}Mzv1WˋŅJ-K@|??R}x|OF=c|??S~ohͧLh/>ScrcqZ٨/l⿉bvuqAȠVdѦ9ޡ"@*1 ,%_v@ҤIyD#Fۓ8#MChH'i\qON5Z߭Hu;K-Nx?Ҁ7Hl% !UfFw>;E4}lBi=^ᕅkA,NFb3zJ3@Fi4њnh?4Fi4њnh;&fh|sPkQF!CѭEw-/C>Ws\/SJ3\>&|/E74nqSsFhSsFhSsFhSsFhSsKk,ybu4߻$)Z_RC}p-_aԊ/IP̊m#gdd헅!\FUT{?jtQ9@D`@'p}PiG=9mc7O{B[\yՒ{!tSsFhO*e~Xz+p^m\PY,җ' S|F7jp6z\5[zٳ5{"z8ϯ iSr7+sҮ[C-e9nrOzf!Y|\ڀ-QQ}f@QQ}f@QQ}f@ Džs5$*YFTzx\3@o{-ZzqG_Z:nis@ A!A$7#ּM{N ~#dVWqUiSUQP'Sm†c3_!ՊA\:υxOGʲh{k#ӵop$r|w.E|x\Y˯Zz Ԃ;m{Oݐ`>uE`%O_sutSsFh)4)4)4)4)4)J^ޡ_s֢^֡_s֢Ծz?o^J+NHoi%v>Sg/QQ7&㨦џzwSr}hQMϽqGѓ@5{se*U14 z㊿zyw-݆7#p1?€&]F 17;I vZ{dDa8 vGLb"| ңv(H_?){?$^L،Ó«>RrRAyQq]ѹjP3t\ ^ 8|duLP!|19ۆt-ncRwqMɣ'֋)4d`SwZ2hqM'֝wFJx!CѭE&u5}u/z@?RWn+Rq^zI]kϙ^%58M&h&њ\I3@)4f ZLњ? _ß֓4,-(4f4=(4X8Xg+t=0>&V n&x,Wzo|}'X&b9?Âp}kxy'V $]άNI/a|g~y)Ic'~9a^2ES</kw<- uriJNL()i`QEQEU]O5 NvLj N%97zy[܁Fk_tE׈DW k)+港L%O34Ei3FjqyLњ^h4f9i3FhyLњ^h4f9i3FhyLњ^hiӒu`iXlx{߶if(!RBa>lCH+ێ=1GN}ƀ9Խ~m+XTz7l֤P~$*"%['s[fbKXos_kbl&02O'AQC_u38\g׊AJ`pmsj쌠@]H#׊gY.a1I 5obJ!B nR)jMq\UST`,n2@@?JVsV3Li3FhyLњ^hɤi3FhyLњ^h4f9i3FhyLњ^h4fi3Fh5 5\XkQ]c| $׿?RWh+[ {)+rT8KqA.ii474f3I7P4m8IgOEY͟?Gl?ٳ͟?E(5g6X?ٳJ*lj?gOE*l͟?Eړ5g6X?A4Op=VJCU M/Vb}8ڬf꟟Zo_΍/Z?ٳ͟?@o_΍/Z?ٳ͟?@o_΍/Z?ٳ͟?@o_΍/Z?ٳ͟?@o_΍/Z?ٳ͟?@o_ΚMq<(9A\qI]9/=}g޹*|l_8Mԙ58OJn~gހ43@'3FhWL??dSVDwRifϳ*5mE4hvڎG'46u6Y ˅?"عoAsw +VTSBHf|rA# # Yև;f]Z|A4:omo&6f1Fwq-$Eni ؈#0x]gn(^mIw3Hmh0x5hdծ2F0ˏ`g;((CSZ5?Ҁ+?ifi\'ȍZgS#&v}*PJ 7Yi\ged~ʝQ[~)dO<6jx[ eY>JKZNIioY-y|IY%1͌2[.㚞M?W($)!hV^EלxTѵ^9<3?7^8GZKwGK}>6Wf2߹ Mɕ'?'~2j֥.X^9W眡kX7R,%#M;8'G9#;N1]Ntuvcn/nمsӶ+#ݢ(((iiҀ0wp(5O Ͻ3@ PsMϽPn}}OZMoB?j+l}u/z)+1M|؊3qƗf4Ti:Q@ )(lj Qc`T}0\uPFE+]BwH2ÒzW&jiPNywLQd><̓r;` M(eu`FArwI(ܶAssߚl~Ӗqr`8zRq!PΣq2zxR+ֹT݀c:uW*ĝqAܚ4OڥrR1\[S+Ju~OidtV|qYG?ΦԴ^m:c_yNy4זKI,k&mf>*A2\]b]*d(X\lVŝ"U`S!eOQ&3c4dK(HZGD EެGsƖG!UXj$r`rq(DxK'</V;o?WAʀH灒 '+p(}8G$B]E"+F]A=kkOO2P%~$]lԣ8;`ߜ#*88#zjNpګ PuԿ α?qmaZ,WR,iYh̐9I#V76vpXdt`YYOBZϿҭn4جne-f2$az]+c od@p_S4T2 ~y8kX%vbž]w4CvJڱU_F @S\"N3(?gҘ)%q`98zEHQA4H0|[h4yOZbBQ]YPO+,t}Gq BLyԜ <#e7(mC9SuMvuC*lJnWTgPv'q\}ׅ"\˵INr=Nj[=#Lk;Dt*n\`$7@9JvO~fhњL@ )(.hi(4giz3I84PQ@ 3IcTt?Ni6sy9RxVE_9=:qPťbH"=KyjTeIld*Ҹt-Bl6($4 0<Ĕ'w14&h/5ig(rE>+F4 dlVDR ӦG^wpc3. !$9'%I$(]@P@L(+;sMɓ,P?)~u2#|2dgoJ~>`q`R_w@Eau'MxO@ZxoHmZ];*3>JcUrI BO9SX I{{.fkr˜dM`ιs]WirA,Fn{VBnYDL$#!wrGڀYHVe="@ ISNOGRݨaPf[Zu;FP8(#lokcYtR>P/v)i!"VDb2N@' 4h/Ru2D<}Je喃q{=ڔ*ބ8v+Cֶ&l'7e?%⣼| qvt@<~2.t=7: *<[88~*1ruY+deU'1J>Ӛ86ѐa8l~MEt3[{[y1?@ֺVj,p#~1XC[pNc?@ZO 0}"u}Pہ)n38ie_4[q {ikAr%#?\qx> D3?ab&д6fDɿf!?޷%ZyI@v2/oV~lPG'k#GnT@'m+0Nڛ2*Ϛ5)m㽕c`c3{heeكv@+3*PHQq:|V8//\ee$G۽itha 'or ֯Zh6QC [bfT3}0t aow3C[ac ʗO4 ! ]ςҮIf=:t;Ĭ flz^jxOMƕy_#E%u>|5]} qƗ>gޓ48ѓMϽ4\ތRPMm-N |!';{})?6#W[ 9[]^\JUsƧ8!gAךP$Sc,{<F,йp{n**Op hI][G-79 9FO$𬐲Y0Cnb3r}'A=) cH;ҫR]*MMqX],mI$`v'qӿ:}hgPh)]Aǵ#X豥IJ_FyYJ,Jp1#z ![hTq\vOk FvUcK.q*S&ݯm!>Xs9'޳$|4d_VGi H 5m#]J\3/<2PXJ/za2 w|y5%tk#l4y<?sixs~t)z<PN= ޺Kk;{hc`vzg(ek'jVb@ ucRQNgUV&[w^v&Lrbb>*o Z'\A])mہ{gޮknuI-0(U`'a8}ð1$xL#%xqiO9-b~d'<#ڨ (jJp@$өҧ|>: T2VB!=9'[F u튭ܘ¾GO|Ph]o W:Ul7sg`mn-gU2g[h$vv_&,LDJwd}SDfWQ  WNcFvPgl&}. 1 9|j <9i3kGʖq)~*ޛh ݵαvP?LRK+'Q4.Oހ*O>Hi&9!l$g?-"8l- O*;w\ڳ<oyxM?$> \3tB308889Wp`Gj gk C _r'R=q`Վ(Jlp(EOBh7Ҁ9џzmvO'֒ތhdџzLPkQF![FږR5U|f kϙ^IHOA;4f(&4f4fi?ѿjU WZ@r7w$$ݍz=)ѥWU1aې8-s~t8Zd9tWLR7@0sp1ɠ }RKe~Xm {z;?M5ĒFcV#;UAI20.+2ö$1֤:v#̌wgH=z@O ia[hp>nN4- Ed-&$, zRdxf5wv6ul)aZD"JGTK)z>g<"WBf|sd2hҹS.㩭4 FB) &ld<4&dX J@\@3I~T$=֋%$ hU#4!Gym~/O#_Z\>Fhz>?S+[9ȾPz'ζOCXζJuâ5Ǩc07oʪ1g,rY ;Mz#" b62GAoγM5ivk$g[ qxK̒14] @\t?(yh}Ih(x0Xqjr|'hۈ$g@$@\.:gڥRYsX;rW}(MI![6poU=21VFwixAW2^zS4Kxy]6OS܌ּGo$E?( x?{Ŀ[[:/:gqZ'ŚPjHݖ vg'VEQd ?)FO U_hEUd@(rWh n'!j=2{vޖ?D-c?^i̾c@$3A#zր/y M A2T#6 $9un,d(#L?}kcT{k{,6DC4DGci*(t{>KnA[ Bq䎝Ef [*+xܻ@8 ox;Y-nn8= fGڣĚca1f7n]}1T3#>6ji3<[s&H$}kl!p\ =}THPd#.LqEkyobfqop{UZ6; Y`UDIu``w犵7/8VU'$*ק#T7OQLѠMĠQ>vH#nNrԹc|CuI<4U ʑO_Z=J[^*oKg,ٺH \7'U"W*@USC FN6+P3M=hFM4f)fO^4M%xƳ![FjkQ]c| ~.GJs\Ó)+Sg/Q٣43H(44Q@ j3M4PAcNm˪ /^s3Zn#Za;R Sry##mhuWd f-B?I\ԗ UV yx. ta!8\A8:CƠh~bWGf*7]oI3FC3pz`}h[ $S+ 2ws3W4U#TFv'5Rk\CF3שZ6o 8 r8ֺK@dk>!@ KuҪֱ?_4-Q^&[I$ltoր*si0F/#;,%S;fq*{ݕ>c~lUtI']BFK_$m\> Vy<*^@Qv5ŏFld?i Gp0,z~y0v7!;H:8ʰ<U%IcG_W ~1ZtC5P'"#ƊWw{ f~ Aw;ItT'8V\cԴ}QO$N B ohcK!W3$ s0Xxn+_\0lB8犞=+D .\2yfcq@=X?Ng!ˍ7p?[eGb񸐂 4xPZ$K'+>ntA5,Hi\+`ެtvgO:rkuxX KO ZY܋p29=tYm$sx uޡ{ 0*dp0NxhҵrJ$L0F?|j:&n6 0Tz~{]A(Qb\yRZLc$ZP8e[eUvऎ' Xs { ,]W@ VK(:UH}Z3,$o<'u4Q`6"_7 }V5mDOHx/Xf "_sJh?_H88UxMV=+CQӚP:ح BcVm*.0SosUJPԶU袹kR?#ct' }+ 첢9V$33tH5 twc{X_$O<UɝN+I~1{}[3bCN[v3CXTF~T7T:y*n-X8){& :oHx/Uyo"׿9s_H>$#3sMP]8 ohNhfh%Yr+Px@9s뺹[NΑ7rǾ)RvirrzS2'D#_;:͝g5qͯHx/I )Xg7 }RDbh?_Hx/Xf ϺT_걹 "ƨHsY,F}fZ3MFiz3Mn>gޛ(5_ 5yԮCc|t׍yE~Q?Gp{(GG_μkd/?( >Cc7 5ƶG<c(d?=ȇ޿_μod/?( >Cc|tyƶG<c(d?=ȧ_^7?F_W}!1j}:MG<c(d?=HS׍lyE~Q?Gqd?=z}:Q"_μkd/?( >!1j}:MG<c(d?=HO^5?F_W}!1ƶG<c(d?=ȇ޿_μod/?( >Cc|tu[#Q߱lyE~Qw?ɽ/_μkd/?( >!1D?ƿ׍yE~Q?Gqd?=OHdSk׍yE~Q?Gp{'_ΗO^5?F_W}!1b}:?:( 6G<c(eSo_/^7?F_W}!1kR.9hEQWj ++#ل9b endstream endobj 16 0 obj << /Type /Annot /Subtype /Link /A 17 0 R /Border [0 0 0] /H /I /Rect [ 189.0767 364.1986 253.7417 373.3561 ] >> endobj 17 0 obj << /Type /Action /S /URI /URI (mailto:help@sun.ac.za) >> endobj 18 0 obj << /Type /Annot /Subtype /Link /A 19 0 R /Border [0 0 0] /H /I /Rect [ 273.7577 364.1986 354.9197 373.3561 ] >> endobj 19 0 obj << /Type /Action /S /URI /URI (mailto:sysadm@sun.ac.za) >> endobj 20 0 obj << /Type /Annot /Subtype /Link /A 21 0 R /Border [0 0 0] /H /I /Rect [ 205.0877 333.2206 283.7477 342.3781 ] >> endobj 21 0 obj << /Type /Action /S /URI /URI (mailto:sysadm@sun.ac.za) >> endobj 22 0 obj << /Type /Annot /Subtype /Link /A 23 0 R /Border [0 0 0] /H /I /Rect [ 307.2467 333.2206 371.9117 342.3781 ] >> endobj 23 0 obj << /Type /Action /S /URI /URI (mailto:help@sun.ac.za) >> endobj xref 0 24 0000000000 65535 f 0000000008 00000 n 0000000073 00000 n 0000000119 00000 n 0000000350 00000 n 0000000387 00000 n 0000000525 00000 n 0000000588 00000 n 0000002951 00000 n 0000003063 00000 n 0000003178 00000 n 0000003298 00000 n 0000003406 00000 n 0000028638 00000 n 0000028743 00000 n 0000032491 00000 n 0000057059 00000 n 0000057187 00000 n 0000057260 00000 n 0000057388 00000 n 0000057463 00000 n 0000057591 00000 n 0000057666 00000 n 0000057794 00000 n trailer << /Size 24 /Root 1 0 R /Info 5 0 R >> startxref 57867 %%EOF report phishing « Informasietegnologie

  • Recent Posts

  • Categories

  • Archives

report phishing

« Older Entries

How do I report phishing?

Tuesday, October 5th, 2021

You’ve received a suspicious email, what should you do with it? Firstly, don’t click on any links. But just as important, send it to us so we can prevent more staff and students falling prey to the scam. We encourage our customers to submit potential phishing examples for review. Using these submissions, the Cyber Security Incident Response Team (CSIRT) can learn from the analysis of these messages. This collectively helps to improve the level of virus and spam detection.

What is phishing?

Phishing attacks are designed to steal a person’s login and password details so that the cyber criminal can assume control of the victim’s social network, email, and online bank accounts. Seventy percent of internet users choose the same password for almost every web service they use. This is why phishing is so effective, as the criminal, by using the same login details, can access multiple private accounts and manipulate them for their own good. 

More on how to recognise a phishing email. 

Report phishing

On the ICT Partner Portal:

*Spam or phishing examples must be sent in either.EML or .MSG format as an attachment and must not be forwarded. This ensures the original email can be analysed with its full Internet message headers intact. Alternatively, use the mail application to save the email (usually located under File | Save As) as an .EML or .MSG format to a folder location, and attach the saved file to a new email.

Email

Tags: , , , ,
Posted in phishing, Security, Tips | Comments Off on How do I report phishing?

How to avoid phishing scams

Friday, May 24th, 2019

We are often asked by staff and students what they can do to stop phishing scams, and what software they should install to prevent them from becoming victims. In some cases students have asked us to fix their computers and to install software to block phishing scams.

Of course that request is impossible to fulfil. Phishing scams are like the common cold. Just like you cannot prevent the common cold, you can only adopt a lifestyle, and take precautionary measures to reduce your risk of infection. They will always be there and will always adapt and change. As long as there are people who are uninformed or careless who fall for these scams, phishing attacks will continue.

The best way to reduce your risk is to report all suspected phishing scams on ICT Partner Portal. (Full details at the end of this post). Here are some basic rules to help you to identify phishing scams:

  • Use common sense
    Never click on links, download files or open attachments in email or social media, even if it appears to be from a known, trusted source.
  • Watch out for shortened links
    Pay particularly close attention to shortened links. Always place your mouse over a web link in an email (known as “hovering”) to see if you’re being sent to the right website.
  • Does the email look suspicious?
    Read it again. Many phishing emails are obvious and will have implausible and generally suspicious content.
  • Be wary of threats and urgent deadlines
    Threats and urgency, especially coming from what claims to be a legitimate company, are a giveaway sign of phishing. Ignore the scare tactics and rather contact the company via phone.
  • Browse securely with HTTPS
    Always, where possible, use a secure website, indicated by https:// and a security “lock” icon in the browser’s address bar, to browse.
  • Never use public, unsecured Wi-Fi, including Maties Wi-Fi, for banking, shopping or entering personal information online
    Convenience should never be more important than safety.

If you do receive a phishing e-mail, please report it as soon as possible. Once you have reported the spam or phishing mail, you can delete it immediately.

You can report this on IT’s request logging system, the ICT Partner Portal.

  • Go to the ICT Partner Portal.
  • Fill in your information and add the email as an attachment. Your request will automatically be logged on the system and the appropriate measures will be taken by the system administrators to protect the rest of campus.

[ARTICLE BY DAVID WILES]

Email

Tags: , ,
Posted in phishing, Security, Tips | Comments Off on How to avoid phishing scams

Phishing scams requesting quotes and notification about “new message”

Wednesday, November 21st, 2018

Phishing attacks on the university continue with this week’s “flavour” being a return of the old “Request For Quotation” scam. With this scam you might receive an email from a large corporation arrives asking for you to provide a quotation, with an attached PDF that you are asked to fill in and send back to the sender.

Why would an academic department secretary be getting an RFQ to supply industrial supplies like sewage pumps? Scammers often only want to steal information from their victims, and in the case of the Faculty of Health Sciences, the scam RFQ could change to supply something like medical supplies or equipment.

Remember the email may look very convincing, with known company letterheads, VAT certificates etc.

It is important not to respond to the sender or to open up the attachment. Often scammers just need a response so they can identify “live bait” and fine-tune their attack to a particular person.

Another phishing scam that appears to be coming back uses attention-getting subjects like “You have a new message” or “We’ve resolved your dispute” or “SARS refund pending” designed to get your attention. This particular one uses forged “Citibank” branding and informs you that a dispute has been resolved and you will be paid some money, but you are asked to open up a “document” to see the disputed transaction.

The danger is in the document which will be download if you click on the link. In this particular case, it is a document with embedded macros that will install malware on your computer to steal personal information. Normally macros in Microsoft Word are disabled by default, but if you have enabled them for legitimate reasons then there would be a danger to your computer if you attempt to open the attached document.

These phishing scams are sent out to many university email addresses at the same time, so you are not personally being targeted by the phishers. These attacks will continue in various forms, because there are still individuals who fall for these scams, making phishing attacks very profitable.

If you do receive mail like this then please report it to IT Cyber Security. Once you have reported the spam or phishing mail, you can delete it immediately. You can do this in two ways:

  1. By reporting it on the ICT Partner Portal. Go to https://servicedesk.sun.ac.za and select “Report phishing, spam and malware” right at the bottom of the list. Fill in your information and add the email as an attachment. Your request will automatically be logged on the system.
  2. By sending an email. 
    – Start up a new mail addressed to csirt@sun.ac.za. 
    – Use the Title “SPAM” (without quotes) in the Subject.
    – With this New Mail window open, drag the suspicious spam/phishing mail from your Inbox into the New Mail Window. It will attach the mail as an enclosure and a small icon with a light yellow envelope will appear in the attachments section of the – New Mail.
    – Send the mail.

[Article by David Wiles]

Email

Tags: ,
Posted in phishing, Security | Comments Off on Phishing scams requesting quotes and notification about “new message”

Warning: Phishing scam exploiting ABSA new logo

Tuesday, July 17th, 2018

Many of you use ABSA as your bank of choice, as well as making use of ABSA Bank’s Internet Banking facilities, so this warning might be of particular significance.

Earlier this month ABSA announced a new logo – part of its rebranding campaign – and almost immediately phishing scammers exploited this opportunity to continue their nefarious campaign of identity theft through phishing email attacks.

Several users have reported getting the following email – allegedly from ABSA – taking advantage of the new logo to target the bank’s customers in a phishing email scam by attempting to trick users to click on a link to take them to a fake website.

The scam email states that it comes from Absa CEO Maria Ramos, but it’s actually from an outside source and informs victims that “today marks a very significant day in the Absa journey”. The email uses Absa’s slogan, saying “We are also launching a new, fresh and vibrant Absa logo and identity that reflects our commitment to you, our customers”. Potential victims are then encouraged to click on their “New Absa eStatements” in PDF format. This is not a statement, but an HTML file which takes users to a phishing website.

Here is one example of the phishing e-mail which has already appeared in several University email accounts, as well as personal home email accounts:

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

As always, you should never respond to a suspicious looking email or message or click on a link in any suspicious looking email. Rather delete the email. No South African bank will ever contact customers and request sensitive information (card PIN, card CVV or online banking password) via email, telephone or SMS.

If you have received a phishing email, immediately report it to the Information Technology CyberSecurity Team using the following method:
 
1. Start up a new mail addressed to sysadm@sun.ac.za (CC: help@sun.ac.za)
2. Use the Title “SPAM” (without quotes) in the Subject.
3. With this New Mail window open, drag the suspicious spam/phishing mail from your Inbox into the New Mail Window. It will attach the mail as an enclosure and a small icon with a light yellow envelope will appear in the attachments section of the New Mail.
4. Send the mail.

IF YOU HAVE FALLEN FOR THE SCAM:
If you did click on the link of a phishing spam and unwittingly gave the scammers your username, email address and password  immediately go to http://www.sun.ac.za/useradm and change the passwords on ALL your university accounts (making sure the new password is completely different and is a strong password that will not be easily guessed.), as well as changing the passwords on your social media and private email accounts (especially if you use the same passwords on these accounts.)
 
Useful information on how to report and combat phishing and spam can also be found on our blog

[ARTICLE BY DAVID WILES]

Email

Tags: , , ,
Posted in E-mail, phishing, Security | Comments Off on Warning: Phishing scam exploiting ABSA new logo

Phishing Scam about “Unexpected Mail Shutdown

Wednesday, June 6th, 2018

There is currently a bombardment of phishing emails arriving in university accounts about an “Unexpected Mail Shutdown”. The mail used alarmist threats about pending shutdowns and has all the signs of a phishing scam, including a website that is not on the university network.

This is a typical phishing scam and although it is being sent to university addresses, you should not react, respond or click on any links, as the phishers insert your email address in the link field and thus can identify your account as functional.

Below is the mail arriving in many university accounts:

 

If you have received this mail like this, please report is to the Information Technology Cybersecurity Team using the following method:

Send the spam/phishing mail to help@sun.ac.za and sysadm@sun.ac.za

Attach the phishing or suspicious mail on to the message if possible.
1. Start up a new mail addressed to sysadm@sun.ac.za (CC: help@sun.ac.za)
2. Use the Title “SPAM” (without quotes) in the Subject.
3. With this New Mail window open, drag the suspicious spam/phishing mail from your Inbox into the New Mail Window. It will attach the mail as an enclosure and a small icon with a light yellow envelope will appear in the attachments section of the New Mail.
4. Send the mail.

[Information supplied by David Wiles]

Email

Tags: ,
Posted in phishing, Security | Comments Off on Phishing Scam about “Unexpected Mail Shutdown

« Older Entries
 

© 2013-2025 Disclaimer: The views and opinions expressed in this page are strictly those of the page author(s) and content contributor(s). The contents of this page have not been reviewed or approved by Stellenbosch University.