{"id":13565,"date":"2019-01-30T12:11:16","date_gmt":"2019-01-30T10:11:16","guid":{"rendered":"http:\/\/blogs.sun.ac.za\/it\/?p=13565"},"modified":"2019-01-31T10:46:48","modified_gmt":"2019-01-31T08:46:48","slug":"sars-phishing-scam","status":"publish","type":"post","link":"https:\/\/blogs.sun.ac.za\/it\/2019\/01\/sars-phishing-scam\/","title":{"rendered":"[:en]SARS phishing scam[:]"},"content":{"rendered":"

[:en]<\/p>\n

Please be on the lookout for the next phishing attack on the university network. This time (as occurred several times in 2018) it comes with a subject of \u201cSARS eFiling Letter Notification\u201d<\/p>\n

This is an obvious phishing scam using a website to attempt to steal your login details.<\/p>\n

    \n
  1. SARS will\u00a0not send you an email with the salutation: \u201cDear Tax Payer\u201d, they’ll address you personally.<\/li>\n
  2. The sender is a compromised email address from an estate agent in Pretoria and not a SARS email address.<\/li>\n
  3. The link takes you to a site that is not the SARS eFiling Server address.<\/li>\n
  4. Apart from department admin who deals with SARS directly, university email addresses are not (and should not be) used for SARS communication.<\/li>\n<\/ol>\n

    Here is an example of the email that several of our observant colleagues and students have already reported:<\/p>\n

    \"\"<\/a><\/p>\n

    Here is the phishing website that will attempt to steal your login details:<\/p>\n

    \"\"<\/a><\/p>\n

    If you receive an email like this, please report it to IT Cyber Security as soon as possible.<\/p>\n

    Once you have reported the spam or phishing mail, you can delete it immediately. You can report this in two ways:<\/p>\n

      \n
    1. By reporting it on the ICT Partner Portal. Go to https:\/\/servicedesk.sun.ac.za\/jira\/servicedesk\/customer\/portal\/6\/create\/115<\/a>. Fill in your information and add the email as an attachment. Your request will automatically be logged on the system.<\/li>\n
    2. By sending an email.\u00a0\n
        \n
      1. Start up a new mail addressed to csirt@sun.ac.za<\/a>.<\/li>\n
      2. Use the Title \u201cSPAM\u201d (without quotes) in the Subject.<\/li>\n
      3. With this New Mail window open, drag the suspicious spam\/phishing mail from your Inbox into the New Mail Window. It will attach the mail as an enclosure and a small icon with a light yellow envelope will appear in the attachments section of the \u2013 New Mail.<\/li>\n
      4. Send the mail.<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n

        [ARTICLE BY DAVID WILES]<\/p>\n

        [:]<\/p>\n","protected":false},"excerpt":{"rendered":"

        [:en] Please be on the lookout for the next phishing attack on the university network. This time (as occurred several times in 2018) it comes with a subject of \u201cSARS eFiling Letter Notification\u201d This is an obvious phishing scam using a website to attempt to steal your login details. SARS will\u00a0not send you an email […]<\/p>\n","protected":false},"author":259,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20382,20381,29187],"tags":[],"class_list":["post-13565","post","type-post","status-publish","format-standard","hentry","category-email","category-phishing","category-security-2"],"publishpress_future_action":{"enabled":false,"date":"2026-05-08 03:16:52","action":"change-status","newStatus":"draft","terms":[],"taxonomy":"category","extraData":[]},"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/posts\/13565","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/users\/259"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/comments?post=13565"}],"version-history":[{"count":5,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/posts\/13565\/revisions"}],"predecessor-version":[{"id":13572,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/posts\/13565\/revisions\/13572"}],"wp:attachment":[{"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/media?parent=13565"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/categories?post=13565"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/tags?post=13565"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}