{"id":12861,"date":"2018-03-15T12:49:31","date_gmt":"2018-03-15T10:49:31","guid":{"rendered":"http:\/\/blogs.sun.ac.za\/it\/?p=12861"},"modified":"2018-03-15T12:50:37","modified_gmt":"2018-03-15T10:50:37","slug":"phishing-email-with-subject-do-not-ignore-the-warning","status":"publish","type":"post","link":"https:\/\/blogs.sun.ac.za\/it\/2018\/03\/phishing-email-with-subject-do-not-ignore-the-warning\/","title":{"rendered":"[:en]Phishing email with subject: “ DO NOT IGNORE THE WARNING”[:]"},"content":{"rendered":"

[:en]<\/p>\n

Several staff are receiving a \u201cthreatening\u201d e-mail with the subject \u201c<your email address> DO NOT IGNORE THE WARNING\u201d<\/p>\n

Your e-mail address will be inserted at the begining of the message, and then proceeds to inform you about your account being used for \u201cspam activities\u201d and that it will be blacklisted and permanently suspended.<\/p>\n

Here is an example of the mail (with all the dangerous stuff removed)\"\"<\/a><\/p>\n

If you are fooled into clicking on the link, you will be taken to a website (based in Zimbabwe) and your e-mail address will be automatically inserted in the field, and you will be asked to type in your password, and then the scammers will have gained access to your network account!\"\"<\/p>\n

This is a typical tactic employed by phishers targeting university e-mail accounts. They use your contact details and intimidating language to cause you to panic and \u201cclick on the link they provide.<\/p>\n

When spotting phishing scams remember:<\/strong><\/p>\n

    \n
  1. Don\u2019t trust the display name.<\/strong><\/li>\n
  2. Look but don\u2019t click.<\/strong><\/li>\n
  3. Check for spelling mistakes.<\/strong><\/li>\n
  4. Analyse the salutation.<\/strong><\/li>\n
  5. Don\u2019t give up personal information – ever.<\/strong><\/li>\n
  6. Beware of urgent or threatening language in the subject line.<\/strong><\/li>\n
  7. Review the signature (remember the university\u2019s own centennial celebration and \u201cwater-wise\u201d branding is being used in *some* external phishing attacks)<\/strong><\/li>\n
  8. Don\u2019t click on attachments.<\/strong><\/li>\n
  9. Don\u2019t trust the header from an email address.<\/strong><\/li>\n
  10. Don\u2019t believe everything you see.<\/strong><\/li>\n<\/ol>\n

    Phishers are extremely good at what they do. Just because an email has convincing brand logos, language, and a seemingly valid email address, does not mean that it\u2019s legitimate. Be sceptical when it comes to your email messages\u2014if it looks even remotely suspicious, don\u2019t open it.<\/p>\n

    If you have received mail that looks like this, please immediately report it to the Information Technology Security Team using the following method:<\/p>\n

    Send the spam\/phishing mail to the following addresses:\u00a0help@sun.ac.za\u00a0<\/a>and sysadm@sun.ac.za<\/a>.\u00a0<\/p>\n

    Attach the phishing or suspicious mail on to the message if possible. \u00a0<\/p>\n

      \n
    1. Start up a new mail addressed to sysadm@sun.ac.za<\/a> (CC: help@sun.ac.za<\/a>)<\/li>\n
    2. Use the Title \u201cSPAM\u201d (without quotes) in the Subject.<\/li>\n
    3. With this New Mail window open, drag the suspicious spam\/phishing mail from your Inbox into the New Mail Window. It will attach the mail as an enclosure and a small icon with a light yellow envelope will appear in the attachments section of the New Mail.<\/li>\n
    4. Send the mail.<\/li>\n<\/ol>\n

      [Article by David Wiles]<\/p>\n

      [:]<\/p>\n","protected":false},"excerpt":{"rendered":"

      [:en] Several staff are receiving a \u201cthreatening\u201d e-mail with the subject \u201c<your email address> DO NOT IGNORE THE WARNING\u201d Your e-mail address will be inserted at the begining of the message, and then proceeds to inform you about your account being used for \u201cspam activities\u201d and that it will be blacklisted and permanently suspended. Here […]<\/p>\n","protected":false},"author":259,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20382,20381,29187],"tags":[],"class_list":["post-12861","post","type-post","status-publish","format-standard","hentry","category-email","category-phishing","category-security-2"],"publishpress_future_action":{"enabled":false,"date":"2026-07-31 09:20:15","action":"change-status","newStatus":"draft","terms":[],"taxonomy":"category","extraData":[]},"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/posts\/12861","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/users\/259"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/comments?post=12861"}],"version-history":[{"count":12,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/posts\/12861\/revisions"}],"predecessor-version":[{"id":12875,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/posts\/12861\/revisions\/12875"}],"wp:attachment":[{"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/media?parent=12861"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/categories?post=12861"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/tags?post=12861"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}