{"id":11105,"date":"2016-07-15T10:17:32","date_gmt":"2016-07-15T08:17:32","guid":{"rendered":"http:\/\/blogs.sun.ac.za\/it\/?p=11105"},"modified":"2016-08-26T08:51:24","modified_gmt":"2016-08-26T06:51:24","slug":"phishing-scam-poses-as-email-from-it","status":"publish","type":"post","link":"https:\/\/blogs.sun.ac.za\/it\/2016\/07\/phishing-scam-poses-as-email-from-it\/","title":{"rendered":"[:en]Email from &#8220;IT&#8221; a scam [:af]Vals e-pos skep verwarring"},"content":{"rendered":"<p>[:en]\u00a0Phishing scams disguised as an e-mail from The IT Admin Desk, asking you to upgrade your e-mail, are nothing new.\u00a0This week two more of these e-mails, from the same source, have been sent to SU staff&#8217;s mailboxes. One is from the ADMIN TEAM\u00a0and another from IT SERVICE DESK.<\/p>\n<p>Both e-mails ask you to \u201clog in\u201d to update or verify your account, using the link included. Both are sent from compromised e-mail accounts from Minnesota and Iowa educational institutions.\u00a0One diverts to a server controlled by scammers in Brazil and the other California. However, both use a forged \u201clogin page\u201d and the same details.<\/p>\n<p>Do not respond to these e-mails or go to the site given in the e-mail. Do not fill in your username, password or other details on any site.\u00a0Stellenbosch University Information Technology has no need for users to provide user names and passwords on any site other than www.sun.ac.za\/useradm,\u00a0where you can manage your network account. We are also able to upgrade or migrate your e-mail account without asking you to assist.<\/p>\n<p>Our e-mails will always be branded and in Afrikaans and English. If you are unsure about an e-mail you received, speak to your local computer expert or ask the IT Service Desk (021-8084367 or <a href=\"mailto:helpinfo@sun.ac.za\">helpinfo@sun.ac.za<\/a>).<\/p>\n<p>Here is an example of the phishing mail:\u00a0<\/p>\n<p><em>From: I, Amscammer<\/em><\/p>\n<p><em>Sent: Thursday, July 14, <\/em>2016<em> 5:56 AM<\/em><\/p>\n<p><em>To: 1,Amscammer<\/em><\/p>\n<p><em>Subject: ADMIN TEAM\/IT SERVICE DESK\/IT HELPDESK\/IT SUPPORT\/WEBMAIL ADMIN (and all variations you could think of)\u00a0<\/em><\/p>\n<p><em>Dear E-mail User:-\u00a0<\/em><\/p>\n<p><em>Take note of this important update that our new webmail has been improved with a new messaging system from <\/em>Owa<em>\/outlook which also include faster usage on e-mail, shared calendar,web-documents and the New 2016 Anti-Spam Version.\u00a0<\/em><\/p>\n<p><em>Please use the link below to complete your update for our new <\/em>Owa<em>\/outlook improved webmail.<\/em><\/p>\n<p><em>Log on to Outlook Web Access&lt;<a href=\"http:\/\/blogs.sun.ac.za\/it\/en\/2016\/05\/ennew-phishing-message-distributed-on-campus-afnuwe-phishing-boodskap-op-kampus-versprei\/\">http:\/\/iam.aspammer.com<\/a>&gt; to update your mailbox.<\/em><\/p>\n<p><em>ITS Help Desk<br \/><\/em><em>ADMIN TEAM<br \/><\/em><em>\u00a9Copyright 2016 Microsoft Outlook<br \/><\/em><em>All Right Reserved.<\/em><\/p>\n<p style=\"text-align: right;\">[INFORMATION SUPPLIED BY DAVID WILES]<\/p>\n<p style=\"text-align: left;\">[:af]\u00a0IT se &#8220;Admin Desk&#8221; het verlede week talle e-posse uitgestuur om personeel en studente te versoek om rekeninge te heraktiveer. Of het ons? Gelukkig word ons gebruikers nie meer met `n slap riem gevang nie. Of is julle?<\/p>\n<p style=\"text-align: left;\"><em>Phishing<\/em>\u00a0e-posse, wat vra dat jy jou e-posrekening heraktiveer, is uitgestuur\u00a0vanaf\u00a0die rekening\u00a0&#8220;The IT Admin Desk&#8221;. Twee ander e-posse is gestuur deur &#8220;ADMIN TEAM&#8221; en &#8220;IT SERVICE DESK&#8221; vanaf\u00a0dieselfde bron, gekaapte e-posse by opvoedkundige instellings in Minnesota en Iowa.\u00a0<\/p>\n<p style=\"text-align: left;\">Al die e-posse versoek dat jy, deur middel van `n skakel, aanteken om jou rekening te verifieer of opdateer. Een is herlei na `n bediener in Brasili\u00eb, die ander Kaliforni\u00eb.\u00a0<\/p>\n<p>Moenie reageer op hierdie e-posse nie en moet ook nie na die verskafte webwerfadres gaan nie. Moenie jou gebruikersnaam, wagwoord, of enige ander inligting op die webwerf invul nie.<\/p>\n<p>Universiteit Stellenbosch se Informasietegnologie-afdeling hoef nie jou gebruikersnaam en wagwoord te vra nie. Die enigste plek waar dit nodig is om in te vul is op www.sun.ac.za\/useradm, waar jy jou eie rekening bestuur. IT kan jou e-posrekening skuif of opgradeer sonder dat jy enigiets hoef te doen.\u00a0<\/p>\n<p>Ons e-posse sal altyd herkenbaar wees, in dieselfde formaat en in Afrikaans en Engels.\u00a0<\/p>\n<p>Indien jy onseker is oor &#8216;n e-pos, vra vir jou plaaslike rekenaarkundige of kontak die IT Dienstoonbank (021-8084367 of\u00a0<a href=\"mailto:helpinfo@sun.ac.za\">helpinfo@sun.ac.za<\/a>).<\/p>\n<p>Hier is `n voorbeeld van die<em> phishing<\/em> e-pos:\u00a0<\/p>\n<p><em>From: I, Amscammer<\/em><\/p>\n<p><em>Sent: Thursday, July 14, <\/em>2016<em> 5:56 AM<\/em><\/p>\n<p><em>To: 1,Amscammer<\/em><\/p>\n<p><em>Subject: ADMIN TEAM\/IT SERVICE DESK\/IT HELPDESK\/IT SUPPORT\/WEBMAIL ADMIN (and all variations you could think of)\u00a0<\/em><\/p>\n<p><em>Dear E-mail User:-\u00a0<\/em><\/p>\n<p><em>Take note of this important update that our new webmail has been improved with a new messaging system from <\/em>Owa<em>\/outlook which also include faster usage on e-mail, shared calendar,web-documents and the New 2016 Anti-Spam Version.\u00a0<\/em><\/p>\n<p><em>Please use the link below to complete your update for our new <\/em>Owa<em>\/outlook improved webmail.<\/em><\/p>\n<p><em>Log on to Outlook Web Access&lt;<a href=\"http:\/\/blogs.sun.ac.za\/it\/en\/2016\/05\/ennew-phishing-message-distributed-on-campus-afnuwe-phishing-boodskap-op-kampus-versprei\/\">http:\/\/iam.aspammer.com<\/a>&gt; to update your mailbox.<\/em><\/p>\n<p><em>ITS Help Desk<br \/><\/em><em>ADMIN TEAM<br \/><\/em><em>\u00a9Copyright 2016 Microsoft Outlook<br \/><\/em><em>All Right Reserved.<\/em><\/p>\n<p style=\"text-align: right;\">[INLIGTING VERSKAF DEUR DAVID WILES]<\/p>\n","protected":false},"excerpt":{"rendered":"<p>[:en]\u00a0Phishing scams disguised as an e-mail from The IT Admin Desk, asking you to upgrade your e-mail, are nothing new.\u00a0This week two more of these e-mails, from the same source, have been sent to SU staff&#8217;s mailboxes. One is from the ADMIN TEAM\u00a0and another from IT SERVICE DESK. Both e-mails ask you to \u201clog in\u201d [&hellip;]<\/p>\n","protected":false},"author":259,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20382,29187],"tags":[20381],"class_list":["post-11105","post","type-post","status-publish","format-standard","hentry","category-email","category-security-2","tag-phishing"],"publishpress_future_action":{"enabled":false,"date":"2026-05-10 02:11:54","action":"change-status","newStatus":"draft","terms":[],"taxonomy":"category","extraData":[]},"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/posts\/11105","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/users\/259"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/comments?post=11105"}],"version-history":[{"count":10,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/posts\/11105\/revisions"}],"predecessor-version":[{"id":11199,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/posts\/11105\/revisions\/11199"}],"wp:attachment":[{"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/media?parent=11105"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/categories?post=11105"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/tags?post=11105"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}