Fordham Information Technology - Secure IT: May 2011

Friday, May 27, 2011

Facebook goes two-factor

Facebook goes two-factor

Mac malware authors release a new, more dangerous version | ZDNet

Mac malware authors release a new, more dangerous version ZDNet

Just when you thought it was safe to own a Mac!

Don't be Fooled by Fake Epsilon Breach Warnings

Please DO NOT respond to these messages or anything that looks like them. You may disregard and delete these messages. If you have any questions about the validity of these emails please contact the University Help Desk directly at 718 817-3999 or via email: helpdesk@fordham.edu.

There is a new phishing campaign offering credit reports to "customers" affected by the recent Epsilon breach. Do not fall victim to this scam. Delete these messages and if are concerned about your credit, use a trusted company or go through the company directly where you became exposed through originally.

For more information:
http://isc.sans.org/diary.html?n&storyid=10930

Tuesday, May 17, 2011

Account Verification - Phishing Email Sent to the Fordham Community on 5/17/2011

This is another phishing scam email that has been reported. This message was received on or aboutMay 17th, 2011. Please DO NOT respond to this message or anything that looks like it. You may disregard and delete this message. If you have any questions about the validity of this email please contact the University Help Desk directly at 718 817-3999 or via email: helpdesk@fordham.edu.


From: "School Email Helpdesk"
Date: May 17, 2011 3:25:07 AM EDT
To: user@fordham.edu
Subject: Account Verification
Reply-To: techemail8@aol.com
THIS MESSAGE IS FROM OUR TECHNICAL SUPPORT TEAM
This message is sent automatically by the computer. If you are receiving
this message it means that your email address user@fordham.edu has been queued for deactivation;
this was as a result of a continuous error script (code:505) received from this email
address. To resolve this problem you must reset your email address.
In order to reset this email address, you must reply to this e-mail by
providing us the following Information for confirmation.

Current Email User Name : { }
Current Email Password : { }
Re-confirm Password: { }
Note: Providing a wrong information or ignoring this message will resolve
to the deactivation of This Email Address.

Technical Support Team.

Monday, May 16, 2011

Your ACH transaction - Malicious Email Sent to the Fordham Community on 5/16/2011

This is a malicious email that has been reported. This message was received on May 16th, 2011. Please DO NOT open this message or anything that looks like it. You may disregard and delete this message. If you have any questions about the validity of this email please contact the University Help Desk directly at 718 817-3999 or via email: helpdesk@fordham.edu.

*** Other emails have been reported being received with a similar subject such as, "ACH payment rejected." Past campaigns using ACH as the sender have led users to a fake Java update, which installs malware. These emails are not legit and should not be trusted. ***


To: user@fordham.edu

From: payments@nacha.org

Date: 05/16/2011 09:31 AM EDT

Subject: Your ACH transaction

The ACH transfer (ID: 54449262190360), recently sent from your checking account (by you or any other person), was canceled by the Electronic Payments Association.

Rejected transfer

Transaction ID:

54449262190360

Reason for rejection

See details in the report below

Transaction Report

report_54449262190360.pdf.exe (self-extracting archive, Adobe PDF)

13450 Sunrise Valley Drive, Suite 100 Herndon, VA 20171 (703) 561-1100

2011 NACHA - The Electronic Payments Association

ACH transfer rejected - Malicious Email Sent to the Fordham Community on 5/16/2011

This is malicious email that has been reported. This message was received on May 16th, 2010. Please DO NOT open this message or anything that looks like it. You may disregard and delete this message. If you have any questions about the validity of this email please contact the University Help Desk directly at 718 817-3999 or via email: helpdesk@fordham.edu.

From transfers@nacha.org
05/16/2011 06:55 AM
To user@fordham.edu
cc
Subject ACH transfer rejected

The ACH transfer (ID: 702222428851), recently sent from your bank account (by you or any other person), was canceled by the other financial institution.
Rejected transaction
Transaction ID: 702222428851
Reason of rejection See details in the report below
Transaction Report report_702222428851.pdf.exe (self-extracting archive, Adobe PDF)
13450 Sunrise Valley Drive, Suite 100 Herndon, VA 20171 (703) 561-1100
2011 NACHA - The Electronic Payments Association

Monday, May 9, 2011

Your E-mail account expires in 2days - Phishing Email Sent to the Fordham Community on 5/9/2011

This is another phishing scam email that has been reported. This message was received on or about May 9th, 2011. Please DO NOT respond to this message or anything that looks like it. You may disregard and delete this message. If you have any questions about the validity of this email please contact the University Help Desk directly at 718 817-3999 or via email: helpdesk@fordham.edu.

From: "IT DESK - Webmaster" check.updateinf@post.com
To: help-desk01@owawebmaster.org
Date: 05/09/2011 08:25 AM
Subject: Your E-mail account expires in 2days

Your E-mail account expires in 2days
THIS MESSAGE IS FROM OUR TECHNICAL SUPPORT TEAM.
If you are receiving this message it means
that your email-address is due for deactivation;
this was as a result of a continuous error script (code:505)
received from this email-address. To resolve this problem
you must reset your email-address. In order to reset this
email-address, you must reply to this e-mail by
providing us the following information for confirmation.
Email Address:
Password :
Confirm Password:
Domain\username:
Note: Providing a wrong information or ignoring
this message will resolve to the deactivation
of This Email Address. We apologize for any
inconvinience. Thank you for your cooperation.
Webmaster Desk (IT DEPARTMENT)
Information and Technology

Monday, May 2, 2011

You visit illegal websites- Phishing Email Sent to the Fordham Community on 5/2/2011

This is another phishing scam email that has been reported. This message was received on or about May 2th, 2011. Please DO NOT respond to this message or anything that looks like it. You may disregard and delete this message. If you have any questions about the validity of this email please contact the University Help Desk directly at 718 817-3999 or via email: helpdesk@fordham.edu.


From "FBI" info89426@fbi.gov
05/02/2011 04:11 AM

To user@fordham.edu

cc

Subject You visit illegal websites[ScanMail Notification] Virus detected!

Sir/Madam, we have logged your IP-address on more than 40 illegal Websites. Important: Please answer our questions! The list of questions are attached. la mk tp

US-CERT Technical Cyber Security Alerts

IT Security - The IT Security Industry's Web Resource