Articles by author: tknox

  • Phishing Attempt Subject: 1/16/2020 Payroll

    The email below is an example of a Phishing Attempt that was received by users on campus. If you’ve received this email, do not click on any of the contained links and delete it from your inbox.

    Please note that Brock will never send emails asking for your personal information.

    If you identify an email you think is a phishing attack, or you are concerned you may have fallen victim, contact the service desk at x4357 or email us at itsecurity@brocku.ca

    Phishing Email: 

    From: Ursu, Catalin <C***u@s***c.ca>
    Sent: Thursday, January 16, 2020 9:20 AM
    To: Ursu, Catalin <C****@s***c.ca>
    Subject: 1/16/2020 Payroll

    1/16/2020

    New payroll directory adjustment notification , Please kindly  Click and complete the required directive to be added to 2020 payroll directory .

    Thank you,

    Payroll Admin Department .

    Tags:
    Categories: Cyber Security

  • Phishing Attempt Subject: Payroll Calender

    The email below is an example of a Phishing Attempt that was received by users on campus. If you’ve received this email, do not click on any of the contained links and delete it from your inbox.

    Please note that Brock will never send emails asking for your personal information.

    If you identify an email you think is a phishing attack, or you are concerned you may have fallen victim, contact the service desk at x4357 or email us at itsecurity@brocku.ca

    Phishing Email: 

    From: Brock University <payroll@brocku.ca>
    Sent: Wednesday, October 9, 2019 12:23 PM
    Subject: Payroll Calender

     

    Dear Member

    You new payroll schedule calendar for 2019/20 is now available for your approval.

    Payroll-19/20.pdf

    Approval will be permanent within the next 48hours.

    Best Regards,
    Brock University

    Tags:
    Categories: Cyber Security

  • Phishing Attempt Subject: Alerte de sécurité!

    The email below is an example of a Phishing Attempt that was received by users on campus. If you’ve received this email, do not click on any of the contained links and delete it from your inbox.

    Please note that Brock will never send emails asking for your personal information.

    If you identify an email you think is a phishing attack, or you are concerned you may have fallen victim, contact the service desk at x4357 or email us at itsecurity@brocku.ca

    Phishing Email: 

    Je vous salue!

    J’ai de mauvaises nouvelles pour vous.
    10/11/2018 – ce jour-là, j’ai piraté votre système d’exploitation et obtenu un accès complet à votre compte à partir: xxxxx@brocku.ca

    Pas la peine de changer le mot de passe, mon logiciel malveillant l’intercepte à chaque fois.

    Comment c’était:
    Le logiciel du routeur auquel vous étiez connecté ce jour-là comportait une vulnérabilité.
    J’ai d’abord piraté ce routeur et y ai placé mon code malveillant.
    Lorsque vous êtes entré sur Internet, mon cheval de Troie était installé sur le système d’exploitation de votre appareil.

    Après cela, j’ai effectué une sauvegarde complète de votre disque (j’ai tout votre carnet d’adresses,
    l’historique des sites de visionnage, tous les fichiers, les numéros de téléphone et les adresses de tous vos contacts).

    Il y a un mois, je voulais verrouiller votre appareil et demander un peu d’argent pour le déverrouiller.
    Mais j’ai jeté un œil sur les sites que vous visitez régulièrement, et j’ai eu grand plaisir à voir vos ressources préférées.
    Je parle de sites pour adultes.

    Je veux dire – tu es un grand pervers. Vous avez une fantaisie débridée!

    Après cela, une idée m’est venue à l’esprit.
    J’ai fait une capture d’écran du site Web intimeoù vous contentez-vous (Comprends-tu ce que je veux dire?).
    Après cela, j’ai fait une vidéo de votre plaisir (en utilisant la caméra de votre appareil). Il s’est avéré magnifique!

    Je suis fermement convaincu que vous ne voudriez pas montrer ces photos à vos parents, amis ou collègues.
    Je pense que 304€ est une très petite somme pour mon silence.
    En plus, j’ai passé beaucoup de temps sur toi!

    J’accepte de l’argent uniquement en Bitcoins.
    Mon portefeuille BTC: 12EMAbSboa1nvg518vcjvogSL4aDwaUCv9

    Vous ne savez pas comment reconstituer un portefeuille Bitcoin?
    Dans n’importe quel moteur de recherche, écrivez “comment envoyer de l’argent à un portefeuille de la BTC”.
    C’est plus facile que d’envoyer de l’argent à une carte de crédit!

    Pour le paiement, vous avez un peu plus de deux jours (exactement 50 heures).
    Ne vous inquiétez pas, la minuterie commencera au moment où vous ouvrez cette lettre. Oui, oui .. cela a déjà commencé!

    Après paiement, mon virus et vos photos sales avec vous s’autodétruisent automatiquement.
    Si je ne reçois pas le montant spécifié de votre part, votre appareil sera bloqué et tous vos contacts recevront une photo avec vos “joies”.

    Je veux que tu sois prudent.
    – N’essayez pas de trouver et de détruire mon virus! (Toutes vos données sont déjà téléchargées sur un serveur distant)
    – N’essayez pas de me contacter (ce n’est pas faisable, je vous ai envoyé un email depuis votre compte)
    – Divers services de sécurité ne vous aideront pas. formater un disque ou détruire un périphérique ne vous aidera pas non plus, puisque vos données sont déjà sur un serveur distant.

    P.S. Je vous garantis que je ne vous dérangerai plus après le paiement, car vous n’êtes pas ma seule victime.
    C’est un code d’honneur des hackers.

    À partir de maintenant, je vous conseille d’utiliser de bons antivirus et de les mettre à jour régulièrement (plusieurs fois par jour)!

    Ne soyez pas en colère contre moi, tout le monde a son propre travail.
    Adieu.

    Tags:
    Categories: Cyber Security

  • Phishing Attempt Subject: Expense

    The email below is an example of a Phishing Attempt that was received by users on campus. If you’ve received this email, do not click on any of the contained links and delete it from your inbox.

    Please note that Brock will never send emails asking for your personal information.

    If you identify an email you think is a phishing attack, or you are concerned you may have fallen victim, contact the service desk at x4357 or email us at itsecurity@brocku.ca

    Phishing Email: 

    From: T*****n <executive.mails@earthlink.net>
    Sent: November-19-18 10:39 AM
    Subject: Expense

    Hi,

    Are you available? I need you to get something done for me ASAP.

    Regards,

    This email appears to be sent from a person known to the department. After replying to the above email this arrives:

    Hi,

    I am looking forward to surprise some of the staffs with Apple iTunes Gift Card. I want you to keep it between us pending when they get it. So therefore, I need Apple iTunes Gift Card of $100 face value each. I need 25 pieces of it amounting to $2500. I need you to get the physical card, then you scratch the back out and take a picture of them, attach the pictures showing the pin and email it to me. How soon can you get this done?

    Regards,

     

     

     

    Tags:
    Categories: Cyber Security

  • Beware of Phishing!

    During national cyber security awareness month, we would like to remind Brock to be vigilant when responding to emails or clicking on links contained within.

    It has recently been brought to our attention that a seemingly innocent email has been received by faculty and staff simply asking, “Are you available?” from a sender name known to the department. However, this is a phishing email and if you respond you will soon receive a follow up asking for iTunes gift card codes to be sent.

    Don’t take the bait. To identify suspected phishing emails:

    • Check that both the sender name and reply to email address are what you expected to see before responding. From addresses/sender names are easily forged and can look like the message came from someone you know.
    • Click only on links that you are expecting.
    • Hover your mouse over a suspicious link to see the true destination without having to click on it.
    • Grammar and spelling errors can indicate a phishing email.

    Learn more about Phishing and Social Engineering on the ITS Cyber Security website. You can also view recent examples of phishing emails received at Brock here.

    If you are concerned that you may have fallen victim to a phishing email contact the Help Desk at x4357 or email us at itsecurity@brocku.ca

    Tags:
    Categories: ITS News and Events

  • Phishing Attempt Subject: Hello

    The email below is an example of a Phishing Attempt that was received by users on campus. If you’ve received this email, do not click on any of the contained links and delete it from your inbox.

    Please note that Brock will never send emails asking for your personal information.

    If you identify an email you think is a phishing attack, or you are concerned you may have fallen victim, contact the service desk at x4357 or email us at itsecurity@brocku.ca

    Phishing Email: 

    From: P*****s <p***********@gmail.com>
    Sent: Tuesday, October 16, 2018 6:36 PM
    Subject: Hello

     

    Are you available?

    If you respond to this message, you will receive a followup email requesting iTune gift cards.

    Tags:
    Categories: Cyber Security

  • Phishing Attempt Subject: Attached CV

    The email below is an example of a Phishing Attempt that was received by users on campus. If you’ve received this email, do not click on any of the contained links and delete it from your inbox.

    Please note that Brock will never send emails asking for your personal information.

    If you identify an email you think is a phishing attack, or you are concerned you may have fallen victim, contact the service desk at x4357 or email us at itsecurity@brocku.ca

    Phishing Email: 

    From: Jani E****
    Subject: Attached CV
    Date: October 10, 2018 at 8:14:48 AM MST

     

    How are you doing?

    I’m interested in applying.

    I have attached my Resume for your viewing.

    The password for the file is 1234

    Please see the attached file.

    Thanks.

    Tags:
    Categories: Cyber Security

  • Phishing Attempt Subject: URGENT: A Police Emergency on Campus

    The email below is an example of a Phishing Attempt that was received by users on campus. If you’ve received this email, do not click on any of the contained links and delete it from your inbox.

    Please note that Brock will never send emails asking for your personal information.

    If you identify an email you think is a phishing attack, or you are concerned you may have fallen victim, contact the service desk at x4357 or email us at itsecurity@brocku.ca

    Phishing Email: 

    From: Jaganath, Christa
    Sent: June-26-18 12:58 PM
    Subject: URGENT: A Police Emergency on Campus
    Importance: High

    Hello All,

    There is an emergency situation reported on Campus earlier. Kindly view MEMO released and endeavor to follow outlined protocol;

    Thanks

    Jaganath, Christa

    Brock University,
    1812 Sir Isaac Brock Way, St. Catharines,
    ON L2S 3A1, Canada
    All rights reserved.

    Tags:
    Categories: Cyber Security

  • Phishing Attempt Subject: RE: For Space

    The email below is an example of a Phishing Attempt that was received by users on campus. If you’ve received this email, do not click on any of the contained links and delete it from your inbox.

    Please note that Brock will never send emails asking for your personal information.

    If you identify an email you think is a phishing attack, or you are concerned you may have fallen victim, contact the service desk at x4357 or email us at itsecurity@brocku.ca

    Phishing Email: 

    Phishing Email

    Your account will be suspended by Facebook Help-desk Team, you can no longer send request or add anyone on your Facebook. To avoid complete deletion of your Facebook account in less than 10 Mins from this announcement, Please Click on VALIDATE to upgrade your account immediately.

    Fail to do that your Facebook account will be block

    IT Service Desk Support Team

    Tags:
    Categories: Cyber Security