NACHA spam messages

December 16th, 2011 by itssecurityservices

If you receive an email similar to this one:

Subject: Direct Deposit payment was rejected

This report is mailed to you with regard to the ACH transfer
(ID: 395877206905) that you or any other person recently sent from your banking account.

The current status of the referred transfer is: failed due to the system malfunctioning. Please refer to the report below for the details:

http://ibiinformation.com/c5e061/index.html

Best regards,
Henrietta Hartman
2011 NACHA – The Electronic Payments Association
13450 Sunrise Valley Drive, Suite 100
Herndon, VA 20171

Please delete the message.  Do not respond or click on any links in the message. We have notified NACHA, and their response follows:

NACHA has been the victim of sustained and evolving phishing attacks in which consumers and businesses are receiving emails that appear to come from NACHA. The attacks are occurring with greater frequency and increased sophistication.

 NACHA itself does not process nor touch the ACH transactions that flow to and from organizations and financial institutions. NACHA does not send communications to persons or organizations about individual ACH transactions that they originate or receive.

If you responded or clicked on a link in a such a message, please change your University passwords as soon as possible from another computer, and then change passwords from any other account you use on that computer.

April 13th, 2011 by itssecurityservices

Dear Campus Community,

The following email has been received by many campus members today. It is NOT from the University of Michigan-Flint ITS department. UM-Flint ITS–as well as any other legitimate organization–will NEVER ask for your password in an email or over the phone.

If you receive a similar email message, please do not respond; simply delete this email from your inbox. If you have responded, please change your LAN password immediately and contact the UM-Flint ITS Helpdesk at itshelpdesk@umflint.edu.

It is also important to use caution when clicking on links within emails.  ITS recommends typing the address out in your browsers address bar.

UM-Flint ITS Security Services publishes recent phishing emails at http://blogs.umflint.edu/itssecurityservices/.

If you want more information about phishing emails, you can view a more information about phishing emails at http://www.umflint.edu/its/support_centers/safecomputing/virus.htm. The Safe Computing site at the Ann Arbor campus also has information about phishing emails at http://www.safecomputing.umich.edu/main/phishing_alerts/.

Thank you,

ITS Security Services
University of Michigan-Flint
http://blogs.umflint.edu/itssecurityservices/
Phone:  (810) 766-6804   |   Email:  ITSHelpdesk@umflint.edu

-----Original Message-----

From: alert@umflint.edu [mailto:alert@umflint.edu]
Sent: Tuesday, April 12, 2011 9:26 PM
Subject: Virus check notice

Tech Support University Of Michigan-Flint.

WARNING!!! Michigan-Flint email account holder Our database security scan alert us of a spyware virus which has invade your umflint.edu account to prevent this virus from affecting our database we have to repair your account quickly or shutdown your account permanently.

To fix this problem kindly visit our tech repair link below.

<Link Removed For Security Reasons>

follow the instruction and fill requested field correctly *AVOID WRONG DATA SUBMISSION* Our help desk team will not be of any assistance if your account is closed as a result of your non compliance to this instruction.

Thank you for your understanding.

University Of Michigan-Flint.

Copyright ©2011 Webmail Technical Support Centre.

Campus Community Phishing Alert!!

March 18th, 2011 by itssecurityservices

Dear Campus Community,

The following email has been received by many campus members today. It is NOT from the University of Michigan-Flint ITS department. UM-Flint ITS–as well as any other legitimate organization–will NEVER ask for your password in an email or over the phone.

If you receive a similar email message, please do not respond; simply delete this email from your inbox. If you have responded, please change your LAN password immediately and contact the UM-Flint ITS Helpdesk at itshelpdesk@umflint.edu.

UM-Flint ITS Security Services publishes recent phishing emails at http://blogs.umflint.edu/itssecurityservices/.

If you want more information about phishing emails, you can view a more information about phishing emails at http://www.umflint.edu/its/support_centers/safecomputing/virus.htm. The Safe Computing site at the Ann Arbor campus also has information about phishing emails at http://www.safecomputing.umich.edu/main/phishing_alerts/.

Thank you,

ITS Security Services

University of Michigan-Flint

http://blogs.umflint.edu/itssecurityservices/

Phone:  (810) 766-6804   |   Email:  ITSHelpdesk@umflint.edu

__________________________________________________________________________________________________________________________________________________________________________

From: IT DESK

Sent: Friday, March 18, 2011 3:09 AM

Subject: “umflint.edu” IT DESK.

This message is from umflint.edu  Email Administrator to all our email account subscribers.Due to the recent attack on our database by a new virus called SPEK155.We are currently upgrading our database and all accounts needs to be re-validated and upgraded to the new 2011 antispam version.You are advised to provide us the below information withing the next 72 hours so that your account can be re-validated and upgraded to the new 2011 antispam version or you stand a risk of having your account De-activated from our database due to the menace of this virus.

User Name:

Password:

Confirm Your Password:

Thank You.

umflint.edu  Administrator

Warning Code :ID67565434.

Phishing …

March 18th, 2011 by itssecurityservices

—–Original Message—–
From: IT DESK

Sent: Friday, March 18, 2011 3:07 AM
Subject: “umflint.edu” IT DESK.


This message is from umflint.edu  Email Administrator to all our email account subscribers.Due to the recent attack on our database by a new virus called SPEK155.We are currently upgrading our database and all accounts needs to be re-validated and upgraded to the new 2011 antispam version.You are advised to provide us the below information withing the next 72 hours so that your account can be re-validated and upgraded to the new 2011 antispam version or you stand a risk of having your account De-activated from our database due to the menace of this virus.
User Name:
Password:
Confirm Your Password:
Thank You.
umflint.edu  Administrator
Warning Code :ID67565434.

More phishing email

February 28th, 2011 by itssecurityservices

Subject: RE: Your invoice from VIAGRA – #952159675
The creators of OUR ONLINE PHARMA have been thinking for quite a long time how to make the QUALITY MEDICINE affordable for all the customers.

WE have come up with a brilliant idea selling generic products.
This kind of DRUGS is identical in dose, ingredients, efficiency, safety and quality to the brand ones.

They might differ in color, shape and name and what is the most important in price.

You will spend the same money on GENERIC MEDICINE in a few years as you spend on your regular pills during one month.
Ann $LAST_NAMES

Another new spam email

February 28th, 2011 by itssecurityservices

From: Webmaster
Sent: Sunday, February 27, 2011 9:24 AM
Subject: Dear Webmail Account Owner!!

Dear Webmail Account Owner,

This message is from the University Webmail Messaging Center to all email account owners.

We are currently carrying out scheduled maintenance,upgrade of our web mail service and we are changing our mail host server,as a result your original password will be reset.

We are sorry for any inconvenience caused.

To complete your webmail email account upgrade, you must reply to this email immediately and provide the information requested below.

*********************************************************************************
CONFIRM YOUR EMAIL IDENTITY NOW
E-mail Address:
User Name/Id:
Password:
Re-type Password:
************************************************************************************
Failure to do this will immediately render your email address deactivated from the University Webmail.
************************************************************************************

This E-mail is confidential and privileged. If you are not the intended Recipient please accept our apologies; Please do not Disclose, Copy or Distribute Information in this E-mail or take any action in Reliance on its contents: to do so is strictly prohibited and may be Unlawful.

Please inform us that this Message has gone astray before deleting it.

Thank you for your Co-operation.

Copyright © 2011 University Webmaster. All Rights Reserved

New phishing emails

February 28th, 2011 by itssecurityservices

From: Webmail Admin Center
Sent: Friday, February 25, 2011 6:50 PM
To: info@XXXXX.edu.XX

Subject: RE

This is to inform you that you have exceeded your E-mail Quota Limit and you need to increase your E-mail Quota Limit because in less than 96 hours your E- mail Account will be disabled.Increase your E-mail Quota Limit and continue to use your Webmail Account.

To increase your E-mail Quota Limit to 2.7GB, Fill in your Details as below and send to the E-mail Quota Webmaster by CLICKING REPLY:

EMAIL ADDRESS:
USERNAME:
PASSWORD:
CONFIRM PASSWORD:
DATE OF BIRTH:

Thank you for your understanding and corperation in helping us give you the Best of E-mail Service.@???  2011.

Lookout smartphone users–Android trojan found!

January 4th, 2011 by itssecurityservices

There’s been a trojan found on Android phones in the last couple of days. Currently, there isn’t much threat to Android users who only download applications from Android market. So why would an Android user care? Why should any smartphone user care? According to this article published in Computerworld on October 5, 2010, “Mobile malware exploits on the way, experts say,” there’s been a large increase in attacks on mobile devices and the number  of attacks is rising.

The reason? The purpose of the malware is to steal personal information; other recent smartphone malware has targeted stealing text messaging services (cost $5/message) or installing expensive long-distance calling service without the smartphone owner’s permission.  http://www.pcmag.com/article2/0,2817,2367646,00.asp

So, what can a mobile user do to help protect themselves?

  1. Only install applications from a legitimate source for your phone, such as Android Market or the Apple Apps sites.
  2. Install an antivirus application for your smartphone. Lookout Mobile Security at https://www.mylookout.com/ is available for the Android, BlackBerry, and Windows Mobile phones. Best of all: It’s free. If you lose your phone, it will show you the GPS location and you can turn on a siren remotely. [Yes, I've tried it and it works!] Another free antivirus application available for the Android is AVG Antivirus, http://www.avg.com/us-en/antivirus-for-android
  3. Don’t store confidential information on your phone, such as bank numbers or social security numbers.
  4. Automatically lock your phone when it’s not in use.

Be very careful about using your laptop in an Internet cafe!

October 28th, 2010 by itssecurityservices

There’s a new hijack that surfaced on Sunday called Firesheep.  If you’re surfing the web at a hotspot over an unencrypted wi-fi connection, you’re leaving yourself open to this vulnerability, which can steal your user information for sites such as Facebook. Use SSL or a VPN connection! Here are 2 “how-to” articles that may help you avoid this hijack.

Marcelle Amelia added a new article today about how to deal with a hacked Hotmail account. This Windows Live Solution website will walk you through how to recover your account. http://windowslivehelp.com/solution.aspx?solutionid=6ea0c7b3-1473-4176-b03f-145b951dcb41

If any of your University accounts have been compromised, call, visi,t or email the ITS Helpdesk as soon as possible.

If your gmail account is in trouble, you can start here–you chose other links depending on what your issues are: http://mail.google.com/support/bin/answer.py?answer=50200&cbid=-mmbdid0bno12&src=cb&lev= answer

If your Yahoo! account gets compromised, this link has email and phone addresses to help you get your account straightened out. http://in.answers.yahoo.com/question/index?qid=20100115120127AAO1ihN

Note: It’s probably best to start your search for how to get your compromised account back on the web pages of the organization that gave you the account.

Be careful out there!

Microsoft catching counterfeiters

August 10th, 2010 by itssecurityservices

Microsoft has 9 forensic labs around the world that work on catching counterfeiters. It’s also one of the ways Microsoft fights malware. According to the article at http://www.microsoft.com/presspass/features/2010/apr10/04-20piracy.mspx, counterfeit software is more likely to contain malware and/or viruses.

Be safe! Buy your software from reputable dealers. This website will help you check to find out if your software is genuine http://www.microsoft.com/howtotell/default.aspx?displaylang=en