Information Security News

5/30/08

Phishing Email Alert - KUMC Credit Union

If you receive the following email in your inbox or spam quarantine, please think twice before you click!


This is an example of a recent phishing email that appears to come from the KUMC Credit Union, but is actually designed to send you to a bogus website that will download malicious software onto your computer and steal any user ID and passwords that you enter.

PLEASE DO NOT CLICK ON THE LINK. We recommend that you delete the message immediately.

1/29/08

Universities Reporting Targeted Email Scams

Many universities are reporting email attacks that have occurred over the last few weeks in which their students, faculty and staff receive an email that appears to come from the University's HelpDesk or other official department. The email asks that the recipient provide their user ID and password either by replying to the email or by clicking on a link and entering the information in an online web form. These emails are fraudulent and designed to steal login information to the University's network.

Please note that KUMC Information Resources will never ask you for your password and you should never provide your password to anyone. If you receive this type of email, please forward it to KUMC_Security - do NOT click on any link or reply.

10/29/07

McAfee SiteAdvisor helps KUMC Faculty and Staff surf safely

Have you ever wondered if your favorite website is infecting your computer with spyware or if you're going to be spammed because you surfed there? You're not alone - that's a common question that we're asked here in Security. On November 7, Information Resources will be implementing McAfee SiteAdvisor, a tool that will help KUMC staff and faculty know the answer before you visit a website.

For more information, Visit KUMC's SiteAdvisor website or attend the information session scheduled on November 7 from 2 to 2:45 in Clendening Auditorium.

UPDATED on 8/24/07

Email Virus Alert - Greeting Cards

If you receive an email in your inbox or spam quarantine that says you've received a greeting card, please think twice before you click! Many people have recently received emails that appear to come from a legitimate online greeting card company such as EGreeting.com, postcards.org or BlueMountain.com. The subject line states that you have received an e-card or an e-greeting of some kind and the message contains instructions to click on a link to a website. If you go to that website, it will attempt to install a virus on your computer.

DO NOT CLICK ON THE LINK. We recommend that you delete the message immediately.

---

Example 1

The From line will be from a random email address (one you probably don't recognize).

The Subject is similar to : pre>"You've received a postcard from a partner!"
The message contains text such as:

     "jsmith@randomemail.com asked us to send you this card from postcards.org
     To view your card, follow the link below:

---

Example 2

The From line will look like it was sent from a valid greeting card company. But the address will be different. For example:

     "bluemountain.com <bvyri@qmail.com>"

     "123Greetings.Com <jniz@braceus.com>"

The Subject will look something like:

     "You've received a postcard from a partner!"
 
     "You've received a greeting ecard from a friend!"

The message contains text such as:

     "Your friend has sent you a greeting ecard from bluemountain.com ...

     "Your partner has sent you a postcard from 123Greetings.Com ...

---

As a reminder - NEVER click on a link contained within an email. Instead, cut and paste (or type) the link into your browser.

If you think a card you received might be genuine, we recommend that you contact the person to verify before opening any attachments or linking to any website. If you have any questions or require assistance, please contact KUMC Customer Suport at (913) 588-7995 or customersupport@kumc.edu.