[41442] in Resnet-Forum
Re: Email Scam Problems
daemon@ATHENA.MIT.EDU (Gaynor, Suzanne)
Thu Nov 3 09:55:09 2016
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=94eb2c06652ee4f0cb054065e33e
Message-ID: <CAD971fpRqbF1JKF72LtbZokKoNFgEKX48MgTYFQn80=9gDTjGA@mail.gmail.com>
Date: Thu, 3 Nov 2016 09:53:42 -0400
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: "Gaynor, Suzanne" <gaynors@HARTWICK.EDU>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <7182DA9A-1225-40F6-9D72-B06EFBC6671A@providence.edu>
--94eb2c06652ee4f0cb054065e33e
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
I hope the responses will be shared with the group. We have been lucky to
avoid ransomware but people fall for phishing scams regularly. I had one
employee who took an email out of her spam folder and responded to it, and
a coach who fell for one and his account used which resulted in almost the
whole team falling for it. I have a part in new employee orientation and I
focus on this issue but we are not immune. Also did a workshop for our
Staff Council on the topic. 10 people attended. : ( I have read about
companies who do fake phishing schemes to see who falls for them and uses
the results for education. Not sure how I feel about that.
Suzanne
Suzanne Gaynor
Director, Technology Resource Center
Hartwick College
gaynors@hartwick.edu
607-431-4670
On Thu, Nov 3, 2016 at 9:42 AM, Rizzo, Jim <JRIZZO@providence.edu> wrote:
> Hey all,
>
>
>
> We=E2=80=99re having serious issues with phishing and email scams. In fac=
t, we
> seem to have been hit with a zero-day ransomware virus that encrypted a
> whole bunch of files on a couple people=E2=80=99s computers and network d=
rives. The
> network drives can be restored from the last good backup. The local files
> seem to be a lost cause.
>
>
>
> Anyway=E2=80=A6 How do you all inform, educate, scold, whatever people ab=
out these
> types of problems? The ransomware issue was related to actually clicking =
on
> a bad attachment (and seems to have required downloading a zip file and
> unzipping it and then running the VBS file contained within). Phishing is
> just that. People seem to have no problem sharing their passwords. We
> fairly regularly send emails to the campus about suspicious email message=
s,
> unexpected attachments, and messages asking people to share their
> passwords. They seem to fall on deaf ears/eyes. The same people read thos=
e
> emails, and it=E2=80=99s not the people who need to be taking the message=
to heart.
>
>
>
> Looking for any ideas here. If you have a webpage about it, please share
> the link. If you send emails, please share the text of the email.
>
>
>
> Thanks!
>
> Jim
>
>
>
> --
>
> Jim Rizzo
>
> Helpdesk Manager
>
> Providence College Information Technology
>
> (401) 865-1277
>
>
>
> http://www.providence.edu/helpdesk
>
> *http://www.providence.edu/ihelp <http://www.providence.edu/ihelp>*
>
>
>
> Like us on Facebook!
>
> http://www.facebook.com/ProvCollHelpDesk
>
>
>
> Follow us on Twitter!
>
> http://twitter.com/PCITHelpdesk
> ___________________________________________________ You are subscribed to
> the ResNet-L mailing list.
>
> To subscribe, unsubscribe or search the archives, go to
> http://LISTSERV.ND.EDU/archives/resnet-l.html
> ___________________________________________________
>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--94eb2c06652ee4f0cb054065e33e
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
<div dir=3D"ltr">I hope the responses will be shared with the group. We hav=
e been lucky to avoid ransomware but people fall for phishing scams regular=
ly. I had one employee who took an email out of her spam folder and respond=
ed to it, and a coach who fell for one and his account used which resulted =
in almost the whole team falling for it. I have a part in new employee orie=
ntation and I focus on this issue but we are not immune. Also did a worksho=
p for our Staff Council on the topic. 10 people attended. =C2=A0 : =C2=A0( =
=C2=A0 I have read about companies who do fake phishing schemes to see who =
falls for them and uses the results for education. Not sure how I feel abou=
t that.<div><br></div><div>Suzanne</div></div><div class=3D"gmail_extra"><b=
r clear=3D"all"><div><div class=3D"gmail_signature" data-smartmail=3D"gmail=
_signature">Suzanne Gaynor<div>Director, Technology Resource Center</div><d=
iv>Hartwick College</div><div><a href=3D"mailto:gaynors@hartwick.edu" targe=
t=3D"_blank">gaynors@hartwick.edu</a></div><div>607-431-4670</div></div></d=
iv>
<br><div class=3D"gmail_quote">On Thu, Nov 3, 2016 at 9:42 AM, Rizzo, Jim <=
span dir=3D"ltr"><<a href=3D"mailto:JRIZZO@providence.edu" target=3D"_bl=
ank">JRIZZO@providence.edu</a>></span> wrote:<br><blockquote class=3D"gm=
ail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-le=
ft:1ex">
<div bgcolor=3D"white" lang=3D"EN-US" link=3D"#0563C1" vlink=3D"#954F72">
<div class=3D"m_7021544089426630319WordSection1">
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt">Hey all,<u></u><u><=
/u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt"><u></u>=C2=A0<u></u=
></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt">We=E2=80=99re havin=
g serious issues with phishing and email scams. In fact, we seem to have be=
en hit with a zero-day ransomware virus that encrypted a whole bunch of fil=
es on a couple people=E2=80=99s computers and network
drives. The network drives can be restored from the last good backup. The =
local files seem to be a lost cause.<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt"><u></u>=C2=A0<u></u=
></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt">Anyway=E2=80=A6 How=
do you all inform, educate, scold, whatever people about these types of pr=
oblems? The ransomware issue was related to actually clicking on a bad atta=
chment (and seems to have required downloading
a zip file and unzipping it and then running the VBS file contained within=
). Phishing is just that. People seem to have no problem sharing their pass=
words. We fairly regularly send emails to the campus about suspicious email=
messages, unexpected attachments,
and messages asking people to share their passwords. They seem to fall on =
deaf ears/eyes. The same people read those emails, and it=E2=80=99s not the=
people who need to be taking the message to heart.<u></u><u></u></span></p=
>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt"><u></u>=C2=A0<u></u=
></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt">Looking for any ide=
as here. If you have a webpage about it, please share the link. If you send=
emails, please share the text of the email.
<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt"><u></u>=C2=A0<u></u=
></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt">Thanks!<u></u><u></=
u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt">Jim<u></u><u></u></=
span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt"><u></u>=C2=A0<u></u=
></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;color:black">--=C2=
=A0<u></u><u></u></span></p>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;color:black">Jim Riz=
zo<u></u><u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;color:black">Helpdes=
k Manager<u></u><u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;color:black">Provide=
nce College Information Technology<u></u><u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;color:black">(401) 8=
65-1277<u></u><u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;color:black"><u></u>=
=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;color:black"><a href=
=3D"http://www.providence.edu/helpdesk" target=3D"_blank"><span style=3D"co=
lor:blue">http://www.providence.edu/<wbr>helpdesk</span></a><u></u><u></u><=
/span></p>
</div>
<div>
<p class=3D"MsoNormal"><u><span style=3D"font-size:10.5pt;color:black"><a h=
ref=3D"http://www.providence.edu/ihelp" target=3D"_blank"><span style=3D"co=
lor:blue">http://www.providence.edu/<wbr>ihelp</span></a></span></u><span s=
tyle=3D"font-size:10.5pt;color:black"><u></u><u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;color:black"><u></u>=
=C2=A0<u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;color:black">Like us=
on Facebook!<u></u><u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;color:black"><a href=
=3D"http://www.facebook.com/ProvCollHelpDesk" target=3D"_blank"><span style=
=3D"color:blue">http://www.facebook.com/<wbr>ProvCollHelpDesk</span></a><u>=
</u><u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;color:black"><u></u>=
=C2=A0<u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;color:black">Follow =
us on Twitter!<u></u><u></u></span></p>
</div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;color:black"><a href=
=3D"http://twitter.com/PCITHelpdesk" target=3D"_blank"><span style=3D"color=
:blue">http://twitter.com/<wbr>PCITHelpdesk</span></a></span><u></u><u></u>=
</p>
</div>
</div>
______________________________<wbr>_____________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to <a href=3D"http://LISTSERV.ND.EDU/archives/resnet-l.html" target=3D"_=
blank">http://LISTSERV.ND.EDU/<wbr>archives/resnet-l.html</a>
______________________________<wbr>_____________________
</p></blockquote></div><br></div>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to <a href=3D"http://LISTSERV.ND.EDU/archives/resnet-l.html" target=3D"_blank">http://LISTSERV.ND.EDU/archives/resnet-l.html</a>
___________________________________________________
--94eb2c06652ee4f0cb054065e33e--
