[41465] in Resnet-Forum
Re: Email Scam Problems
daemon@ATHENA.MIT.EDU (Adam Forsyth)
Tue Nov 8 19:54:33 2016
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=001a114146ccf05fa00540d3afaf
Message-ID: <CAHYReyv7yYuBAjSCFeVFmGjX8-9RUNUkhT+3g4MYSmzX0j=CUg@mail.gmail.com>
Date: Tue, 8 Nov 2016 18:53:36 -0600
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: Adam Forsyth <forsytad@LUTHER.EDU>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <7182DA9A-1225-40F6-9D72-B06EFBC6671A@providence.edu>
--001a114146ccf05fa00540d3afaf
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
We are beginning a push to get all of our G Suite (Google Apps) users to
use Google's 2-Step verification. It's opt-in for now, but we're aiming to
require participation by 100% of our users and not make any exceptions.
On Thu, Nov 3, 2016 at 8:42 AM, Rizzo, Jim <JRIZZO@providence.edu> wrote:
> Hey all,
>
>
>
> We=E2=80=99re having serious issues with phishing and email scams. In fac=
t, we
> seem to have been hit with a zero-day ransomware virus that encrypted a
> whole bunch of files on a couple people=E2=80=99s computers and network d=
rives. The
> network drives can be restored from the last good backup. The local files
> seem to be a lost cause.
>
>
>
> Anyway=E2=80=A6 How do you all inform, educate, scold, whatever people ab=
out these
> types of problems? The ransomware issue was related to actually clicking =
on
> a bad attachment (and seems to have required downloading a zip file and
> unzipping it and then running the VBS file contained within). Phishing is
> just that. People seem to have no problem sharing their passwords. We
> fairly regularly send emails to the campus about suspicious email message=
s,
> unexpected attachments, and messages asking people to share their
> passwords. They seem to fall on deaf ears/eyes. The same people read thos=
e
> emails, and it=E2=80=99s not the people who need to be taking the message=
to heart.
>
>
>
> Looking for any ideas here. If you have a webpage about it, please share
> the link. If you send emails, please share the text of the email.
>
>
>
> Thanks!
>
> Jim
>
>
>
> --
>
> Jim Rizzo
>
> Helpdesk Manager
>
> Providence College Information Technology
>
> (401) 865-1277
>
>
>
> http://www.providence.edu/helpdesk
>
> *http://www.providence.edu/ihelp <http://www.providence.edu/ihelp>*
>
>
>
> Like us on Facebook!
>
> http://www.facebook.com/ProvCollHelpDesk
>
>
>
> Follow us on Twitter!
>
> http://twitter.com/PCITHelpdesk
> ___________________________________________________ You are subscribed to
> the ResNet-L mailing list.
>
> To subscribe, unsubscribe or search the archives, go to
> http://LISTSERV.ND.EDU/archives/resnet-l.html
> ___________________________________________________
>
--=20
*Adam Forsyth*
Director of Network and Systems
Luther College Information Technology Services
*700 College DriveDecorah, IA 52101563-387-1402*
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--001a114146ccf05fa00540d3afaf
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
<div dir=3D"ltr">We are beginning a push to get all of our <span style=3D"f=
ont-size:12.8px">G Suite (Google Apps) users to use Google's 2-Step ver=
ification.=C2=A0 It's opt-in for now, but we're aiming to require p=
articipation by 100% of our users and not make any exceptions.</span></div>=
<div class=3D"gmail_extra"><br><div class=3D"gmail_quote">On Thu, Nov 3, 20=
16 at 8:42 AM, Rizzo, Jim <span dir=3D"ltr"><<a href=3D"mailto:JRIZZO@pr=
ovidence.edu" target=3D"_blank">JRIZZO@providence.edu</a>></span> wrote:=
<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-lef=
t:1px #ccc solid;padding-left:1ex">
<div bgcolor=3D"white" lang=3D"EN-US" link=3D"#0563C1" vlink=3D"#954F72">
<div class=3D"m_-2416173342129973208WordSection1">
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt">Hey all,<u></u><u><=
/u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt"><u></u>=C2=A0<u></u=
></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt">We=E2=80=99re havin=
g serious issues with phishing and email scams. In fact, we seem to have be=
en hit with a zero-day ransomware virus that encrypted a whole bunch of fil=
es on a couple people=E2=80=99s computers and network
drives. The network drives can be restored from the last good backup. The =
local files seem to be a lost cause.<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt"><u></u>=C2=A0<u></u=
></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt">Anyway=E2=80=A6 How=
do you all inform, educate, scold, whatever people about these types of pr=
oblems? The ransomware issue was related to actually clicking on a bad atta=
chment (and seems to have required downloading
a zip file and unzipping it and then running the VBS file contained within=
). Phishing is just that. People seem to have no problem sharing their pass=
words. We fairly regularly send emails to the campus about suspicious email=
messages, unexpected attachments,
and messages asking people to share their passwords. They seem to fall on =
deaf ears/eyes. The same people read those emails, and it=E2=80=99s not the=
people who need to be taking the message to heart.<u></u><u></u></span></p=
>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt"><u></u>=C2=A0<u></u=
></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt">Looking for any ide=
as here. If you have a webpage about it, please share the link. If you send=
emails, please share the text of the email.
<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt"><u></u>=C2=A0<u></u=
></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt">Thanks!<u></u><u></=
u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt">Jim<u></u><u></u></=
span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt"><u></u>=C2=A0<u></u=
></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;color:black">--=C2=
=A0<u></u><u></u></span></p>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;color:black">Jim Riz=
zo<u></u><u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;color:black">Helpdes=
k Manager<u></u><u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;color:black">Provide=
nce College Information Technology<u></u><u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;color:black"><a href=
=3D"tel:%28401%29%20865-1277" value=3D"+14018651277" target=3D"_blank">(401=
) 865-1277</a><u></u><u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;color:black"><u></u>=
=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;color:black"><a href=
=3D"http://www.providence.edu/helpdesk" target=3D"_blank"><span style=3D"co=
lor:blue">http://www.providence.edu/<wbr>helpdesk</span></a><u></u><u></u><=
/span></p>
</div>
<div>
<p class=3D"MsoNormal"><u><span style=3D"font-size:10.5pt;color:black"><a h=
ref=3D"http://www.providence.edu/ihelp" target=3D"_blank"><span style=3D"co=
lor:blue">http://www.providence.edu/<wbr>ihelp</span></a></span></u><span s=
tyle=3D"font-size:10.5pt;color:black"><u></u><u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;color:black"><u></u>=
=C2=A0<u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;color:black">Like us=
on Facebook!<u></u><u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;color:black"><a href=
=3D"http://www.facebook.com/ProvCollHelpDesk" target=3D"_blank"><span style=
=3D"color:blue">http://www.facebook.com/<wbr>ProvCollHelpDesk</span></a><u>=
</u><u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;color:black"><u></u>=
=C2=A0<u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;color:black">Follow =
us on Twitter!<u></u><u></u></span></p>
</div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;color:black"><a href=
=3D"http://twitter.com/PCITHelpdesk" target=3D"_blank"><span style=3D"color=
:blue">http://twitter.com/<wbr>PCITHelpdesk</span></a></span><u></u><u></u>=
</p>
</div>
</div>
______________________________<wbr>_____________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to <a href=3D"http://LISTSERV.ND.EDU/archives/resnet-l.html" target=3D"_=
blank">http://LISTSERV.ND.EDU/<wbr>archives/resnet-l.html</a>
______________________________<wbr>_____________________
</p></blockquote></div><br><br clear=3D"all"><div><br></div>-- <br><div cla=
ss=3D"gmail_signature" data-smartmail=3D"gmail_signature"><div dir=3D"ltr">=
<div><div style=3D"text-align:left"><b>Adam Forsyth</b></div><div style=3D"=
text-align:left">Director of Network and Systems<br></div><div style=3D"tex=
t-align:left"><div style=3D"text-align:left;display:inline!important">Luthe=
r College Information Technology Services</div></div><div style=3D"text-ali=
gn:left"><b><div style=3D"text-align:left"><span style=3D"font-weight:norma=
l">700 College Drive</span><span style=3D"white-space:pre"><span style=3D"f=
ont-weight:normal"><br></span></span></div><div style=3D"text-align:left"><=
span style=3D"font-weight:normal">Decorah, IA 52101</span></div><div style=
=3D"text-align:left"><div style=3D"text-align:left;display:inline!important=
"><div style=3D"text-align:left;display:inline!important"><span style=3D"fo=
nt-weight:normal">563-387-1402</span></div></div></div></b></div></div></di=
v></div>
</div>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to <a href=3D"http://LISTSERV.ND.EDU/archives/resnet-l.html" target=3D"_blank">http://LISTSERV.ND.EDU/archives/resnet-l.html</a>
___________________________________________________
--001a114146ccf05fa00540d3afaf--
