UF is aware of two phishing scams recently targeting the University. Both messages have hit the UF IT Alerts page and are also included below. Engineering Administration users have been seeing the ‘Completed Transfer’ email throughout the morning.
https://alerts.it.ufl.edu/3341
https://alerts.it.ufl.edu/3342
Feel free to review the “Phishing Email” information available on UF’s Information Security & Compliance webpage at https://security.ufl.edu/learn-information-security/protect-yourself/email/id-theft-scams/phishing-email/. The information here can help you determine if something is legitimate or not; however, you can always forward it by us for review. Additionally, you can report this directly to UFIT by forwarding the message to abuse@ufl.edu.
If you have questions or comments regarding this feel free to call (392-9217) or email (mis@eng.ufl.edu).
From: IT Alerts
Sent: Friday, June 17, 2016 12:43 PM
To: IT-ALERTS@lists.ufl.edu; . ALL-IT <ALL_IT@mail.ufl.edu>
Subject: Alert Posted – Phishing Scam (University of Florida- new message)
The following Alert has been Posted by dmarlin at Fri 6/17/2016 12:43:28 —
Phishing Scam (University of Florida- new message)
Problem Message runs from Fri 6/17/2016 13:41:00 through Fri 6/24/2016 13:41:00 Link: https://security.ufl.edu/learn-information-security/protect-yourself/email/id-theft-scams/phishing-email/
The Information Security Office is aware of new phishing messages that pretends to be from a UF Administrator about a fictitious Shands email message. The malicious email includes links to a fake login web form. Access to the phishing host has been blocked from UF networks.
Please delete/ignore this message.
Original Message:
From: Murillo Longo Martins Sent: Friday, June 17, 2016 11:19 AM Subject: University of Florida- new message You have a message from University of Florida , kindly __click here__ and login carefully to read it now. Thank you. University of Florida Administrator
From: IT Alerts
Sent: Friday, June 17, 2016 12:36 PM
To: IT-ALERTS@lists.ufl.edu; . ALL-IT <ALL_IT@mail.ufl.edu>
Subject: Alert Posted – Phishing Scam (Completed Transfer | Completed Payment)
The following Alert has been Posted by dmarlin at Fri 6/17/2016 12:35:38 —
Phishing Scam (Completed Transfer | Completed Payment)
Problem Message runs from Fri 6/17/2016 13:33:00 through Fri 6/24/2016 13:33:00 Link: https://security.ufl.edu/learn-information-security/protect-yourself/email/id-theft-scams/phishing-email/
The Information Security Office is aware of new phishing messages that pretend to provide confirmation of a fictitious money transfers. The malicious email includes links to a non-UF hosted fake login web forms. Access to the phishing hosts have been blocked from UF networks.
Please delete/ignore these messages.
Original Message:
Sent: Friday, June 17, 2016 11:25 AM Subject: Completed Transfer. Good day, Here is a confirmation of transfer. Thank you. Kind regard, Attachment - 1 __View__ | __Download__ v