{"id":268,"date":"2013-10-01T15:43:08","date_gmt":"2013-10-01T15:43:08","guid":{"rendered":"https:\/\/www.jsums.edu\/support\/?page_id=268"},"modified":"2019-10-15T09:56:31","modified_gmt":"2019-10-15T09:56:31","slug":"phishing","status":"publish","type":"page","link":"https:\/\/www.jsums.edu\/support\/phishing\/","title":{"rendered":"!!! NEW PHISHING\/SCAM REPORT!!!"},"content":{"rendered":"
\n

\n\t\tEMAIL PHISHING – REMINDER!!<\/span><\/span><\/strong>\n\t<\/p>\n

\n\t\tJSU IT (Information Technology) has become aware of a phishing\/spam<\/span>.Please<\/span>, remember that JSU DIT never <\/span>ask<\/span> users to submit username, password or personal information via external links or e-mail addresses… DO NOT CLICK ANY SUSPICIOUS LINKS.<\/span>
\n\t\t \n\t<\/div>\n
\n

\n\t\t\tIf you receive an email that looks suspicious or comes from an untrusted source, DON'T REPLY<\/u> or CLICK THE LINK!<\/u><\/b> If you receive an email from your coworker, supervisor, or President\/CEO making a request that is uncommon or raises an alarm, for example, requesting that you send files with personally identifiable information (PII) or money or financial records these types of phishing scam emails are called business email compromise (BEC) attacks and are very detrimental to any organization. DO NOT SEND THIS INFORMATION!<\/u><\/b> <\/font><\/span>\n\t\t<\/p>\n

\n\t\t\tAs usual, if you have questions, please feel free to contact e-mail support directly (601)-979-0838<\/a> or email.admin@jsums.edu.<\/span>\n\t\t<\/p>\n

\n\t\t\t \n\t\t<\/p>\n<\/p><\/div>\n

\n\t\t \n\t<\/div>\n
\n\t\tSee phishing\/fraudulent email messages below:<\/span><\/strong>\n\t<\/div>\n
\n\t\t \n\t<\/div>\n
\n

\n\t\t\t===== PHISHING EMAIL MESSAGE =====\n\t\t<\/p>\n

\n\t\t\t"From: ********* <********@hotmail.co.uk>
\n\t\t\tDate: Tue, Oct 15, 2019 at 11:38 AM
\n\t\t\tSubject: Fw: Payment
\n\t\t\tTo: ******************@jsums.edu>\n\t\t<\/p>\n

\n\t\t\t
\n\t\t\tDear  ***********[Name redacted],
\n\t\t\t 
\n\t\t\t$4,875.00\n\t\t<\/p>\n

\n\t\t\tThis email serves to inform you that your refund will be made to your bank account immediately.\n\t\t<\/p>\n

\n\t\t\tKindly check attached for remittance copy.\n\t\t<\/p>\n

\n\t\t\tThanks\n\t\t<\/p>\n

\n\t\t\tFinance Team"\n\t\t<\/p>\n

\n

\n\t\t\t \n\t\t<\/p>\n

\n\t\t\t" From: jsums.edu  <amd@unitorq.in><\/i><\/font>\n\t\t<\/p>\n

\n\t\t\tDate: January 27, 2019 at 5:17:38 PM CST<\/i><\/font>\n\t\t<\/p>\n

\n\t\t\tTo: ********** @jsums.edu<\/i><\/font>\n\t\t<\/p>\n

\n\t\t\tSubject: Account notification\uff1ajsums.edu Cancellation Notice!<\/i><\/font>\n\t\t<\/p>\n

\n\t\t\t
\n\t\t\tjsums.edu Online Account Settings<\/i><\/font>\n\t\t<\/p>\n

\n\t\t\t
\n\t\t\tDear [your name], Your email ******* @jsums.edu<\/i><\/font>\n\t\t<\/p>\n

\n\t\t\thas recently been suspended from the jsums.edu<\/i><\/font>\n\t\t<\/p>\n

\n\t\t\tonline data-base, please verify your email address from our email servers. <\/i><\/font>\n\t\t<\/p>\n

\n\t\t\t <\/i><\/font>\n\t\t<\/p>\n

\n\t\t\tVerify Your Account  <\/i><\/font>\n\t\t<\/p>\n

\n\t\t\tThank you, <\/i><\/font>\n\t\t<\/p>\n

\n\t\t\tThe  jsums.edu Online Account settings "<\/i><\/font>\n\t\t<\/p>\n

\n\t\t\t \n\t\t<\/p>\n

\n

\n\t\t\t \n\t\t<\/p>\n

\n\t\t\t" From:  **********  < ******** @mail.ru<\/a>>
\n\t\t\tDate: Tue, Oct 16, 2018 at 2:52 AM
\n\t\t\tSubject:  [Your Name will be here]
\n\t\t\tTo: < ************** > [redacted] \n\t\t<\/p>\n

\n\t\t\t \n\t\t<\/p>\n

\n\t\t\tI‌ a‌m w‌ell a‌wa‌r‌e  ******  i‌s yo‌ur passwo‌rds. L‌ets get ri‌ght to‌ th‌e po‌i‌nt. No‌body ha‌s co‌mpensa‌t‌ed m‌e to‌ ch‌eck a‌bout yo‌u. You don't know m‌e and yo‌u'r‌e pro‌ba‌bly wond‌eri‌ng why yo‌u'r‌e getti‌ng this e-ma‌il?  ……….. [redacted]<\/i>\n\t\t<\/p>\n

\n\t\t\tYo‌u wi‌ll ma‌k‌e th‌e pa‌yment vi‌a‌ Bi‌tco‌in (i‌f yo‌u don't kno‌w thi‌s, s‌earch fo‌r 'ho‌w to‌ buy bit‌co‌i‌n' i‌n Go‌o‌gl‌e). <\/i>\n\t\t<\/p>\n

\n\t\t\tB‌TC‌ a‌ddr‌ess to s‌end to‌:  ******************   [redacted] 
\n\t\t\t[ca‌s‌e s‌ensi‌ti‌v‌e, co‌py a‌nd pa‌st‌e i‌t] <\/i>\n\t\t<\/p>\n

\n\t\t\ti‌f yo‌u ha‌ve b‌e‌en pla‌nning on goi‌ng to‌ th‌e po‌li‌c‌e, oka‌y, thi‌s m‌essag‌e ca‌n no‌t b‌e traced ba‌ck to m‌e. I ha‌v‌e cov‌er‌ed my st‌eps. i am no‌t lo‌o‌ki‌ng to‌ cha‌rg‌e yo‌u a‌ who‌le lot, i‌ wo‌uld li‌k‌e to b‌e co‌mp‌ensa‌t‌ed. i‌ hav‌e a‌ sp‌eci‌a‌l pi‌x‌el i‌n thi‌s ‌e ma‌il, a‌nd ri‌ght no‌w i‌ kno‌w tha‌t yo‌u ha‌v‌e r‌ead thro‌ugh this ma‌i‌l. Yo‌u now ha‌v‌e o‌n‌e da‌y in o‌rd‌er to‌ pa‌y. i‌f i don't g‌et th‌e BitC‌o‌i‌ns, i‌ wi‌ll c‌erta‌i‌nly s‌end o‌ut yo‌ur vi‌d‌eo‌ to‌ a‌ll of yo‌ur co‌nta‌cts i‌ncludi‌ng fri‌‌ends and fa‌mi‌ly, co-wo‌rk‌ers, and so on. N‌ev‌erth‌el‌ess, if i r‌ecei‌ve th‌e pa‌ym‌ent, i will eras‌e th‌e r‌eco‌rding i‌mmedia‌t‌ely. Thi‌s i‌s th‌e no‌n:n‌ego‌ti‌a‌ble o‌ff‌er so‌ pl‌ea‌se don't wa‌st‌e my ti‌m‌e a‌nd yo‌urs by r‌eplyi‌ng to‌ this ema‌i‌l m‌essag‌e. i‌f you wa‌nt ‌evid‌enc‌e, r‌eply Yea‌h & i‌ wi‌ll s‌end yo‌ur vi‌d‌eo‌ to‌ yo‌ur 5 co‌nta‌cts. "<\/i>\n\t\t<\/p>\n

\n\t\t\t \n\t\t<\/p>\n

\n

\n\t\t\t \n\t\t<\/p>\n

\n\t\t\tFrom: System Administrator <z5035018@ad.unsw.edu.au>
\n\t\t\tDate: Wed, May 10, 2017 at 3:48 AM
\n\t\t\tSubject: Recovery Failed
\n\t\t\tTo: System Administrator <z5035018@ad.unsw.edu.au>\n\t\t<\/p>\n

\n\t\t\t
\n\t\t\tDear User,
\n\t\t\t 
\n\t\t\tYou have (4) Unread Messages and cannot be accessed due to mailbox quota\/limit exceeded, Click<\/span><\/strong> Here to use the message retriever page to retrieve missing messages and clean up mailbox.
\n\t\t\t 
\n\t\t\tSystem Admin.\n\t\t<\/p>\n

\n\t\t\t \n\t\t<\/p>\n

\n\t\t\t \n\t\t<\/p>\n

\n

\n\t\t\tDATE:  5\/4\/17
\n\t\t\t 
\n\t\t\tSUBJECT:  Google Docs Phishing Campaigns
\n\t\t\t 
\n\t\t\tSUMMARY:  On May 3, 2017, several states reported a Google Docs phishing email campaign. The details of the attack are as follows:
\n\t\t\t 
\n\t\t\t·  The email body states “[name] has invited you to view the following document:” and includes a link to “Open in Docs”. The link opens to a legitimate Google login page.\n\t\t<\/p>\n

\n\t\t\t· Once the recipients enter their credentials or select an account, a permissions box for a fraudulent application hosted at hxxps:\/\/googledocs[.]g-docs[.]win requests access to the user’s address book and email.\n\t\t<\/p>\n

\n\t\t\t·  Once the victim clicks “Allow” this provides the attacker access to their email account and address book but not their calendar. The attacker can then send phishing emails to other targets from the compromised account.\n\t\t<\/p>\n

\n

\n\t\t\t \n\t\t<\/p>\n

\n\t\t\t \n\t\t<\/p>\n

\n\t\t\t \n\t\t<\/p>\n

\n\t\t\t \n\t\t<\/p>\n

\n\t\t\t \n\t\t<\/p>\n<\/p><\/div>\n

\n\t\tFrom: <\/span>university Administrator<\/b> <\/span><uniofficialservicesupdates@gmail.com<\/a>><\/span>
\n\t\tDate: Tue, Jun 23, 2015 at 7:05 AM<\/span>
\n\t\tSubject: Email Validation!<\/span><\/span><\/font>\n\t<\/p>\n

\n
\n\t\t\tHello
\n\t\t\t       This e-mail is to notify the students\/staff of  Jackson State University  that we will be performing a scheduled maintenance on your mail account. During this time, your account will not be accessible from your computer or mobile phone. <\/span><\/font>\n\t\t<\/div>\n
\n\t\t\t        We apologize for any inconvenience that this may cause and appreciate your patience while we work to improve our service.Confirm that your account is still in use, also send the following information for verification in order to keep your account active.<\/span><\/font> <\/span><\/font><\/p>\n

\n\t\t\t\t \n\t\t\t<\/p>\n

\n\t\t\t\t \n\t\t\t<\/p>\n

\n\t\t\t\t \n\t\t\t<\/p>\n

\n\t\t\t\t \n\t\t\t<\/p>\n

\n\t\t\t\t \n\t\t\t<\/p>\n

\n\t\t\t\t(1) Username:
\n\t\t\t\t(2) Password:<\/span><\/font>\n\t\t\t<\/p>\n

\n\t\t\t\tFailure to do this will lead to a closure of this account.
\n\t\t\t\tPlease do not disregard this email upon receipt.<\/span><\/font>\n\t\t\t<\/p>\n

\n\t\t\t\t Thank you,
\n\t\t\t\t JSUMS  Mail Administrators.<\/font>
\n\t\t\t\t \n\t\t\t<\/p>\n

\n\t\t\t\t \n\t\t\t<\/p>\n

\n\t\t\t\t \n\t\t\t<\/p>\n

\n\t\t\t\t \n\t\t\t<\/p>\n

\n\t\t\t\t \n\t\t\t<\/p>\n<\/p><\/div>\n

\n\t\t\t \n\t\t<\/p>\n

\n\t\t\t \n\t\t<\/p>\n

\n\t\t\t \n\t\t<\/p>\n

\n\t\t\t \n\t\t<\/p>\n<\/p><\/div>\n<\/div>\n

\n
\n\tEMAIL PHISHING – REMINDER
\n\tLast week, while many of you were out for Spring Break, there was a phishing\/spam email that affected the JSUMS domain.<\/span> <\/span><\/p>\n

\n\t\t \n\t<\/p>\n

\n\t\t \n\t<\/p>\n

\n\t\t \n\t<\/p>\n

\n\t\t \n\t<\/p>\n

\n\t\t \n\t<\/p>\n

\n\t\tThis is a reminder to not open suspicious emails or attachments. Attachments that were used in last week’s phishing attack included files named invoice.jar <\/strong>and JSUMS_Policy_update.jar.<\/strong><\/span>\n\t<\/p>\n

\n\t\tPlease pay close attention to email content, grammar, and do not open .jar or .exe attachments<\/strong>. If you have received an email with these attachments delete it immediately.<\/span>\n\t<\/p>\n

\n\t\tIf you believe that you may have opened a file by mistake, please contact the IT Helpdesk @ 601.979.2005 immediately. <\/span>\n\t<\/p>\n<\/div>\n

\n\tPlease, remember that JSU DIT never asks for users to submit personal information<\/span> via external links or e-mail addresses… DO NOT CLICK ANY SUSPICIOUS LINKS OR ATTACHMENTS<\/span>.\n<\/p>\n

\n\tAs usual, if you have questions, please feel free to contact e-mail support directly (601)-979-0838<\/a> or email.admin@jsums.edu.\n<\/div>\n
\n\t \n<\/div>\n
\n\tSuspicious message below:\n<\/div>\n
\n

\n\t\t===== START MESSAGE =====\n\t<\/p>\n

\n

\n\t\t\tDear Applicants,\n\t\t<\/p>\n

\n\t\t\tInline with our recent policy changes within the Jackson State University,
\n\t\t\tYou are all hereby required to verify your On-Line employment application with Jackson State University immediately, to avoid application cancellation.\n\t\t<\/p>\n

\n\t\t\tPlease find the policy update requirements in the attachment.\n\t\t<\/p>\n

\n\t\t\tThank you,\n\t\t<\/p>\n

\n\t\t\tDenise A. Williams .
\n\t\t\tHR Employment Representative,
\n\t\t\tJackson State University. \n\t\t<\/p>\n

\n\t\t\tAttachment: JSUMS_Policy_update.jar<\/span>\n\t\t<\/p>\n

\n\t\t\t \n\t\t<\/p>\n

\n\t\t\t \n\t\t<\/p>\n

\n\t\t\t \n\t\t<\/p>\n

\n\t\t\t \n\t\t<\/p>\n<\/p><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

EMAIL PHISHING – REMINDER!! JSU IT (Information Technology) has become aware of a phishing\/spam.Please, remember that JSU DIT never ask users to submit username, password or personal information via external links or e-mail addresses… DO NOT CLICK ANY SUSPICIOUS LINKS.   If you receive an email that looks suspicious or comes from an untrusted source, DON'T REPLY or CLICK THE LINK! If […]<\/p>\n","protected":false},"author":136,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"open","ping_status":"open","template":"","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.jsums.edu\/support\/wp-json\/wp\/v2\/pages\/268"}],"collection":[{"href":"https:\/\/www.jsums.edu\/support\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.jsums.edu\/support\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.jsums.edu\/support\/wp-json\/wp\/v2\/users\/136"}],"replies":[{"embeddable":true,"href":"https:\/\/www.jsums.edu\/support\/wp-json\/wp\/v2\/comments?post=268"}],"version-history":[{"count":37,"href":"https:\/\/www.jsums.edu\/support\/wp-json\/wp\/v2\/pages\/268\/revisions"}],"predecessor-version":[{"id":442,"href":"https:\/\/www.jsums.edu\/support\/wp-json\/wp\/v2\/pages\/268\/revisions\/442"}],"wp:attachment":[{"href":"https:\/\/www.jsums.edu\/support\/wp-json\/wp\/v2\/media?parent=268"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}