Fordham Information Technology - Secure IT: November 2011

Tuesday, November 29, 2011

Message could not be delivered [ScanMail Notification] Virus detected! - Phishing Email Sent to the Fordham Community on 11/29/2011

This is another phishing scam email that has been reported. This message was received on or about November 29th, 2011. Please DO NOT respond to this message or anything that looks like it. You may disregard and delete this message. If you have any questions about the validity of this email please contact the University Help Desk directly at 718 817-3999 or via email: helpdesk@fordham.edu.


From: Automatic Email Delivery Software
To: user@fordham.edu
Date: Tue, Nov 29, 2011 9:29 AM

Subject: Message could not be delivered [ScanMail Notification] Virus detected!

Dear user of fordham.edu,
Your account was used to send a large amount of spam during the recent week.Probably, your computer was infected by a recent virus and now contains a trojan proxy server.Please follow our instructions in order to keep your computer safe.

https://mailadministration.fordham.edu

Have a nice day,

fordham.edu support team.

Wednesday, November 16, 2011

NACHA PHISHING ALERT - EMAIL CLAIMING TO BE FROM NACHA

The Electronic Payments Association has received reports that individuals and/or companies have received a fraudulent email that has the appearance of having been sent from NACHA and signed by a non-existent NACHA employee. Specifically, this email claims to be from the “Electronic Payments Association” and appears to be coming from the email address "payments@nacha.org.” See a sample of the email below.

Be aware that phishing emails frequently have attachments and/or links to Web pages that host malicious code and software. Do not open attachments or follow Web links in unsolicited emails from unknown parties or from parties with whom you do not normally communicate, or that appear to be known but are suspicious or otherwise unusual.

NACHA itself does not process nor touch the ACH transactions that flow to and from organizations and financial institutions. NACHA does not send communications to individuals or organizations about individual ACH transactions that they originate or receive.

If malicious code is detected or suspected on a computer, consult with a computer security or anti-virus specialist to remove malicious code or re-install a clean image of the computer system.

Always use anti-virus software and ensure that the virus signatures are automatically updated.

Ensure that the computer operating systems and common software applications security patches are installed and current.

Additional information and guidance on phishing is available from the
Federal Deposit Insurance Corporation (FDIC).

Be alert for different variations of fraudulent emails.

= = = = = Sample Email = = = = = =

From:payments@nacha.org
mailto:payments@nacha.org]
To: Doe, John

Subject: ACH transaction rejected

The ACH transaction, recently sent from your checking account (by you or any other person), was cancelled by the Electronic Payments Association.Please click here to view report

Tuesday, November 1, 2011

light disco shared photos with you - Malicious Email Sent to the Fordham Community on 11/1/2011

This is a malicious email that has been reported. This message was received on November 1st, 2011. Please DO NOT open this message or anything that looks like it. You may disregard and delete this message. If you have any questions about the validity of this email please contact the University Help Desk directly at 718 817-3999 or via email: helpdesk@fordham.edu.

From: light disco sales_djeurope@163.com
To: user@fordham.edu
cc
Subject: light disco shared photos with you

Hello,sir

Thank you for your time

Here is our stage lighting, disco and dj lighting equipment price list, if
you are interest, please contact us soonest.

Thank you

Mr.wu

WWW(DOT)DJ-EUROPE(DOT)COM

NO.FLAT 4-5, EDUCATION ROAD EAST, CHENXI CUN, NANHAI DISTRICT, FOSHAN CITY,
CHINA
POSTCODE: 528248 TELEPHONE: 0086-757-63386561
FAX: 0086-757-63386562 EMAIL: FACTORY1@DJ-EUROPE.COM FACTORY2@DJ-EUROPE.COM

Upgrade Your Webmail Account - Phishing Email Sent to the Fordham Community on 11/1/2011

This is another phishing scam email that has been reported. This message was received on or about November 1st, 2011. Please DO NOT respond to this message or anything that looks like it. You may disregard and delete this message. If you have any questions about the validity of this email please contact the University Help Desk directly at 718 817-3999 or via email: helpdesk@fordham.edu.

From "ITS HELP DESK" cartyproperty@eircom.net
11/01/2011 03:47 AM
To its@webmaster.com
cc

Subject !!! Upgrade Your Webmail Account !!!


Information Technology Services (ITS) are currently upgrading e-mail accounts.This will provide you the ability to store a greatly increased amount of e-mail correspondence in your e-mail account.

Your account has been identified as one of the accounts which are to be upgraded. Please click the link below and follow the instruction

http://itsadmin.host-ed.net/account/confirmation/signin.php

The new minimum quota level for e-mail accounts will be set to 1000mb.

Technology Support Services

-----------------------------------------------------------------
Find the home of your dreams with eircom net property
Sign up for email alerts now http://www.eircom.net/propertyalerts

US-CERT Technical Cyber Security Alerts

IT Security - The IT Security Industry's Web Resource