[:en]<\/p>\n
On the 17 April this year we sent out a warning to you about a phishing scam warning you \u201cYOUR EMAIL HAS BEEN COMPROMISED\u201d and giving you a link to \u201cCertify your email HERE\u201d<\/p>\n
The mail was sent from a student account that has ALREADY really been compromised, by the criminals and they might already be using the account to launch further attacks.<\/p>\n
Just because mail seems to come from a university address, doesn\u2019t mean to say that it is legitimate.<\/p>\n
The subject line is all in capital letters and is meant to frighten you into clicking on a link and filling in your details. This was probably how the original student account was compromised.<\/p>\n
This is a typical phishing scam. Do not respond or click on any of the links. Many thanks to all our observant students and personnel who picked it up and pointed it out to me.<\/p>\n
Below is an example of the mail (with the dangerous bits removed)<\/p>\n
David Wiles<\/p>\n
From: <\/strong>Compromised, Student account <12345678@sun.ac.za<\/a>> Certify Your email\u00a0HERE<\/strong><\/p>\n —<\/p>\n <\/p>\n [ARTICLE BY DAVID WILES]<\/p>\n [:]<\/p>\n","protected":false},"excerpt":{"rendered":" [:en] On the 17 April this year we sent out a warning to you about a phishing scam warning you \u201cYOUR EMAIL HAS BEEN COMPROMISED\u201d and giving you a link to \u201cCertify your email HERE\u201d The mail was sent from a student account that has ALREADY really been compromised, by the criminals and they might […]<\/p>\n","protected":false},"author":259,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20382,29187],"tags":[20381],"class_list":["post-12199","post","type-post","status-publish","format-standard","hentry","category-email","category-security-2","tag-phishing"],"publishpress_future_action":{"enabled":false,"date":"2026-07-30 17:23:42","action":"change-status","newStatus":"draft","terms":[],"taxonomy":"category","extraData":[]},"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/posts\/12199","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/users\/259"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/comments?post=12199"}],"version-history":[{"count":1,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/posts\/12199\/revisions"}],"predecessor-version":[{"id":12200,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/posts\/12199\/revisions\/12200"}],"wp:attachment":[{"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/media?parent=12199"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/categories?post=12199"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/tags?post=12199"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n Sent: <\/strong>2017\/06\/13 15:51 (GMT+02:00)
\n To: <\/strong>fake@email.address<\/a>
\n Subject: <\/strong>YOUR EMAIL ACCOUNT HAS BEEN COMPROMISED \u00a0<\/p>\n