{"id":12950,"date":"2018-05-16T09:30:21","date_gmt":"2018-05-16T07:30:21","guid":{"rendered":"http:\/\/blogs.sun.ac.za\/it\/?p=12950"},"modified":"2018-06-04T09:32:05","modified_gmt":"2018-06-04T07:32:05","slug":"phishing-scam-disguised-as-the-universitys-single-sign-on-page","status":"publish","type":"post","link":"https:\/\/blogs.sun.ac.za\/it\/2018\/05\/phishing-scam-disguised-as-the-universitys-single-sign-on-page\/","title":{"rendered":"[:en]Phishing scam disguised as the university&#8217;s single-sign on page[:]"},"content":{"rendered":"<p>[:en]<\/p>\n<p>Due to the vigilance of an observant personnel member from the US Business School, we have encountered a dangerous phishing scam being sent from a <strong>compromised UNISA account<\/strong>.<\/p>\n<p>The Subject is <strong>\u201cDear SUN E-mail User \u00a9 Copyright 2018 Stellenbosch University\u201d<\/strong> which should immediately raise eyebrows. The phishing email \u201cwarns\u201d you about the pending expiration of your e-mail account and prompts you to click on a link to reactivate it.<\/p>\n<p><strong>See below what the mail looks like:<\/strong><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignleft size-large wp-image-12951\" src=\"http:\/\/blogs.sun.ac.za\/it\/files\/2018\/05\/unisa2-500x309.jpg\" alt=\"\" width=\"500\" height=\"309\" srcset=\"https:\/\/blogs.sun.ac.za\/it\/files\/2018\/05\/unisa2-500x309.jpg 500w, https:\/\/blogs.sun.ac.za\/it\/files\/2018\/05\/unisa2-300x186.jpg 300w, https:\/\/blogs.sun.ac.za\/it\/files\/2018\/05\/unisa2.jpg 690w\" sizes=\"auto, (max-width: 500px) 100vw, 500px\" \/><\/p>\n<p>The danger is that the phishing scammers have perfectly forged the university\u2019s <strong>SINGLE SIGN-ON<\/strong> page, that is used by students an personnel to access the portal pages, the my.sun.ac.za page, SUNLearn etc., as you can see below. Not many people will notice that the address is not a university address, neither is it secure.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignleft size-large wp-image-12952\" src=\"http:\/\/blogs.sun.ac.za\/it\/files\/2018\/05\/unisa3-500x347.jpg\" alt=\"\" width=\"500\" height=\"347\" srcset=\"https:\/\/blogs.sun.ac.za\/it\/files\/2018\/05\/unisa3-500x347.jpg 500w, https:\/\/blogs.sun.ac.za\/it\/files\/2018\/05\/unisa3-300x208.jpg 300w, https:\/\/blogs.sun.ac.za\/it\/files\/2018\/05\/unisa3.jpg 696w\" sizes=\"auto, (max-width: 500px) 100vw, 500px\" \/><\/p>\n<p>It is imperative that you <strong><u>do not click on the link<\/u><\/strong> in the mail, and do not provide the scammers with your username and password as they might be able to access the university\u2019s systems that are accessible through the Single Sign-On page.<\/p>\n<p>Last year scammers were able to forge the e-HR login page through a phishing scam and several staff members had their bank accounts details and other personal details exposed to the scammers.\u00a0 In the light of the issues that Tygerberg staff have been having with general network access earlier this month, and this week\u2019s issue with e-mail, the arrival of this sort of mail at this time can fool some people into thinking that it is legitimate and lead to compromised network and e-mail accounts.<\/p>\n<p>Here\u2019s how to report any phishing or spam mail:<\/p>\n<p>Send the spam\/phishing mail to\u00a0<a href=\"mailto:help@sun.ac.za\">help@sun.ac.za<\/a> and\u00a0<a href=\"mailto:sysadm@sun.ac.za\">sysadm@sun.ac.za.<\/a><\/p>\n<p>Attach the phishing or suspicious mail on to the message if possible.<br \/>\n 1. Start up a new mail addressed to <a href=\"mailto:sysadm@sun.ac.za\">sysadm@sun.ac.za<\/a> (CC: <a href=\"mailto:help@sun.ac.za\">help@sun.ac.za<\/a>)<br \/>\n 2. Use the Title \u201cSPAM\u201d (without quotes) in the Subject.<br \/>\n 3. With this New Mail window open, drag the suspicious spam\/phishing mail from your Inbox into the New Mail Window. It will attach the mail as an enclosure and a small icon with a light yellow envelope will appear in the attachments section of the New Mail.<br \/>\n 4. Send the mail.<\/p>\n<p style=\"text-align: right;\">[Information supplied by David Wiles]<\/p>\n<p>[:]<\/p>\n","protected":false},"excerpt":{"rendered":"<p>[:en] Due to the vigilance of an observant personnel member from the US Business School, we have encountered a dangerous phishing scam being sent from a compromised UNISA account. The Subject is \u201cDear SUN E-mail User \u00a9 Copyright 2018 Stellenbosch University\u201d which should immediately raise eyebrows. The phishing email \u201cwarns\u201d you about the pending expiration [&hellip;]<\/p>\n","protected":false},"author":259,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20382,29187],"tags":[20381,54496],"class_list":["post-12950","post","type-post","status-publish","format-standard","hentry","category-email","category-security-2","tag-phishing","tag-report-phishing"],"publishpress_future_action":{"enabled":false,"date":"2026-08-04 15:17:48","action":"change-status","newStatus":"draft","terms":[],"taxonomy":"category","extraData":[]},"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/posts\/12950","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/users\/259"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/comments?post=12950"}],"version-history":[{"count":2,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/posts\/12950\/revisions"}],"predecessor-version":[{"id":12954,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/posts\/12950\/revisions\/12954"}],"wp:attachment":[{"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/media?parent=12950"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/categories?post=12950"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/tags?post=12950"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}