[1671] in Security FYI
[IS&T Security-FYI] SFYI Newsletter, April 10, 2008
daemon@ATHENA.MIT.EDU (Monique Yeaton)
Fri Apr 10 13:02:27 2009
Message-Id: <8F1EDE02-14B3-471D-ADA6-7C210FD29356@mit.edu>
From: Monique Yeaton <myeaton@mit.edu>
To: ist-security-fyi@mit.edu
Mime-Version: 1.0 (Apple Message framework v930.3)
Date: Fri, 10 Apr 2009 12:57:09 -0400
Cc: itss@mit.edu
Content-Type: multipart/mixed; boundary="===============1602083053=="
Errors-To: ist-security-fyi-bounces@mit.edu
--===============1602083053==
Content-Type: multipart/alternative; boundary=Apple-Mail-3--917574999
--Apple-Mail-3--917574999
Content-Type: text/plain;
charset=WINDOWS-1252;
format=flowed;
delsp=yes
Content-Transfer-Encoding: quoted-printable
In this issue:
1. Rogue DHCP / DNS Changer Virus
2. Least Privileges is Safer
------------------------------------------------
1. Rogue DHCP / DNS Changer Virus
------------------------------------------------
A virus has been making its rounds on campus that changes the network =20=
setup information on computers using DHCP over wired or wireless =20
connections to get to the MIT network. If infected, what will happen =20
is that a web browser will be redirected to web sites spoofing =20
legitimate ones, and into which identity and financial information is =20=
unknowingly entered. False network information may also prevent =20
network access, create an IP address conflict, or generate other =20
network-related error messages.
MIT is now blocking DHCP requests at the border to the known DNS =20
servers used by this malware. This may cause some users to have =20
difficulty accessing the network who had been using these DNS servers =20=
without being aware of it. However, it greatly enhances the security =20
for users on the MIT network as it prevents these DNS servers from =20
sending false information in response to DNS requests (man-in-the-=20
middle attacks). It will also help the Computing Help Desk staff to =20
more quickly identify any networks with infected hosts because =20
machines that pick up the bogus DHCP and DNS info will not appear to =20
work normally anymore.
If you notice any of the following symptoms:
=95 IP address conflicts
=95 Failure to connect to the network
=95 Unexpected network configuration values, especially DNS =
settings =20
values
=95 "Normal" behavior with short blips of lost connectivity
please contact the IS&T Computing Help Desk at computing-help@mit.edu =20=
or 617.253.1101.
----------------------------------
2. Least Privileges is Safer
----------------------------------
There is a principle that applies to computer security, which states =20
that running a computer with least access privileges makes the =20
computer safer from viruses and other attacks. In fact, one study =20
showed that 9 out of 10 viruses could have been thwarted, had the user =20=
not been logged on as an administrator.
Why is this? When you run a computer with administrator access rights, =20=
the computer makes the operating system's core features (such as =20
downloading or removing software, or changing core system settings) =20
available for you to use. When logged into that same computer with a =20
guest or standard user account, many of those core system features are =20=
not accessible.
How does this protect your computer? Much of the malware out in the =20
wild take advantage of the fact that many Windows users run their =20
computers with administrator privileges. Having the core systems =20
settings available to anyone with access to the computer at the time =20
it is running allows any downloaded malware at the time to modify =20
those settings. It makes it extra difficult to remove the malware as =20
well. By the way, Mac OS X users are less affected because once an =20
administrator has been set up on the computer, the operating system =20
requires the administrator password to be used for these same core =20
system tasks for any user of the computer.
While it may be a detriment to some users to have limited access to a =20=
computer through a standard user account, we must remember that web-=20
browsing and downloading from the Web opens our computer up to =20
possible infection. Giving guests a limited account makes sense in =20
these cases. Also, if your work computer contains sensitive data, you =20=
may want to run that computer using a standard user account. This will =20=
protect the data from possible modification or disclosure, in the =20
event you did something you didn't mean to do, or somehow the computer =20=
got infected. Windows also has a Run As feature and Vista has the new =20=
UAC feature, both of which basically use the same principle of least =20
privilege.
Next week I will have more information available online for those =20
interested in this topic. If you are concerned that these settings =20
will make it more difficult to carry out your everyday work tasks, =20
it's best to verify what using this feature would change as far as =20
accessiblity. Discuss with your desktop support person or the =20
Computing Help Desk how best to set up least privileges on your =20
computer. This is also something you will only want to try yourself if =20=
you have an advanced level of computer technology knowledge.
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
Monique Yeaton
IT Security Awareness Consultant
MIT Information Services & Technology (IS&T)
(617) 253-2715
http://web.mit.edu/ist/security
---------------------------------------
Important: DO NOT GIVE OUT YOUR PASSWORDS!
Ignore emails asking you to provide yours. IS&T will *NEVER* ask you =20
for your password.
--Apple-Mail-3--917574999
Content-Type: text/html;
charset=WINDOWS-1252
Content-Transfer-Encoding: quoted-printable
<html><body style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; =
-webkit-line-break: after-white-space; "><p style=3D"margin: 0.0px 0.0px =
0.0px 0.0px; font: 14.0px Helvetica; min-height: 17.0px"> <br =
class=3D"webkit-block-placeholder"></p><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; ">In this issue:</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
min-height: 17px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; ">1. Rogue DHCP / DNS Changer =
Virus</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Helvetica; ">2. Least Privileges is Safer</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
min-height: 17px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; min-height: 17px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
">------------------------------------------------</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; ">1. =
Rogue DHCP / DNS Changer Virus</div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; =
">------------------------------------------------</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
min-height: 17px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; ">A virus has been making its =
rounds on campus that changes the network setup information on computers =
using DHCP over wired or wireless connections to get to the MIT network. =
If infected, what will happen is that a web browser will be redirected =
to web sites spoofing legitimate ones, and into which identity and =
financial information is unknowingly entered. False network information =
may also prevent network access, create an IP address conflict, or =
generate other network-related error messages.</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
min-height: 17px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; ">MIT is now blocking DHCP requests =
at the border to the known DNS servers used by this malware. This may =
cause some users to have difficulty accessing the network who had been =
using these DNS servers without being aware of it. However, it greatly =
enhances the security for users on the MIT network as it prevents these =
DNS servers from sending false information in response to DNS requests =
(man-in-the-middle attacks). It will also help the Computing Help Desk =
staff to more quickly identify any networks with infected hosts because =
machines that pick up the bogus DHCP and DNS info will not appear to =
work normally anymore.</div><div style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Helvetica; min-height: 17px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; ">If =
you notice any of the following symptoms:</div><div style=3D"margin-top: =
0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 14px/normal Helvetica; min-height: 17px; =
"><br></div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Arial; "><span class=3D"Apple-tab-span" =
style=3D"white-space:pre"> </span>=95<span class=3D"Apple-tab-span" =
style=3D"white-space:pre"> </span>IP address conflicts</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Arial; "><span =
class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>=95<span =
class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>Failure =
to connect to the network</div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Arial; "><span class=3D"Apple-tab-span" =
style=3D"white-space:pre"> </span>=95<span class=3D"Apple-tab-span" =
style=3D"white-space:pre"> </span>Unexpected network configuration =
values, especially DNS settings values</div><div style=3D"margin-top: =
0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: =
normal normal normal 14px/normal Arial; "><span class=3D"Apple-tab-span" =
style=3D"white-space:pre"> </span>=95<span class=3D"Apple-tab-span" =
style=3D"white-space:pre"> </span>"Normal" behavior with short =
blips of lost connectivity</div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Arial; min-height: 16px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Arial; ">please =
contact the IS&T Computing Help Desk at <a =
href=3D"mailto:computing-help@mit.edu">computing-help@mit.edu</a> or =
617.253.1101.</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Arial; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; min-height: 17px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
">----------------------------------</div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; ">2. Least Privileges is =
Safer</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Helvetica; ">----------------------------------</div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
min-height: 17px; "><br></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; ">There is a principle that applies =
to computer security, which states that running a computer with least =
access privileges makes the computer safer from viruses and other =
attacks. In fact, one study showed that 9 out of 10 viruses could have =
been thwarted, had the user not been logged on as an =
administrator.</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Helvetica; min-height: 17px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
">Why is this? When you run a computer with administrator access rights, =
the computer makes the operating system's core features (such as =
downloading or removing software, or changing core system settings) =
available for you to use. When logged into that same computer with a =
guest or standard user account, many of those core system features are =
not accessible. </div><div style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Helvetica; min-height: 17px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
">How does this protect your computer? Much of the malware out in the =
wild take advantage of the fact that many Windows users run their =
computers with administrator privileges. Having the core systems =
settings available to anyone with access to the computer at the time it =
is running allows any downloaded malware at the time to modify those =
settings. It makes it extra difficult to remove the malware as well. By =
the way, Mac OS X users are less affected because once an administrator =
has been set up on the computer, the operating system requires the =
administrator password to be used for these same core system tasks for =
any user of the computer.</div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; min-height: 17px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
">While it may be a detriment to some users to have limited access to a =
computer through a standard user account, we must remember that =
web-browsing and downloading from the Web opens our computer up to =
possible infection. Giving guests a limited account makes sense in these =
cases. Also, if your work computer contains sensitive data, you may want =
to run that computer using a standard user account. This will protect =
the data from possible modification or disclosure, in the event you did =
something you didn't mean to do, or somehow the computer got infected. =
Windows also has a Run As feature and Vista has the new UAC feature, =
both of which basically use the same principle of least =
privilege.</div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px; font: normal normal normal =
14px/normal Helvetica; min-height: 17px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
">Next week I will have more information available online for those =
interested in this topic. If you are concerned that these settings will =
make it more difficult to carry out your everyday work tasks, it's best =
to verify what using this feature would change as far as accessiblity. =
Discuss with your desktop support person or the Computing Help Desk how =
best to set up least privileges on your computer. This is also something =
you will only want to try yourself if you have an advanced level of =
computer technology knowledge.</div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal =
normal normal 14px/normal Helvetica; min-height: 17px; "><br></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px; font: normal normal normal 14px/normal Helvetica; =
min-height: 17px; "><br></div><div apple-content-edited=3D"true"><span =
class=3D"Apple-style-span" style=3D"border-collapse: separate; color: =
rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: =
normal; font-variant: normal; font-weight: normal; letter-spacing: =
normal; line-height: normal; orphans: 2; text-align: auto; text-indent: =
0px; text-transform: none; white-space: normal; widows: 2; word-spacing: =
0px; -webkit-border-horizontal-spacing: 0px; =
-webkit-border-vertical-spacing: 0px; =
-webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0; "><div style=3D"word-wrap: =
break-word; -webkit-nbsp-mode: space; -webkit-line-break: =
after-white-space; "><span class=3D"Apple-style-span" =
style=3D"border-collapse: separate; color: rgb(0, 0, 0); font-family: =
Helvetica; font-size: 14px; font-style: normal; font-variant: normal; =
font-weight: normal; letter-spacing: normal; line-height: normal; =
orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; =
widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; =
-webkit-border-vertical-spacing: 0px; =
-webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0px; "><div style=3D"word-wrap: =
break-word; -webkit-nbsp-mode: space; -webkit-line-break: =
after-white-space; "><span class=3D"Apple-style-span" =
style=3D"border-collapse: separate; color: rgb(0, 0, 0); font-family: =
Helvetica; font-size: 14px; font-style: normal; font-variant: normal; =
font-weight: normal; letter-spacing: normal; line-height: normal; =
orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; =
widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; =
-webkit-border-vertical-spacing: 0px; =
-webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0px; "><div style=3D"word-wrap: =
break-word; -webkit-nbsp-mode: space; -webkit-line-break: =
after-white-space; "><span class=3D"Apple-style-span" =
style=3D"border-collapse: separate; color: rgb(0, 0, 0); font-family: =
Helvetica; font-size: 14px; font-style: normal; font-variant: normal; =
font-weight: normal; letter-spacing: normal; line-height: normal; =
orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; =
widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; =
-webkit-border-vertical-spacing: 0px; =
-webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0px; "><div style=3D"word-wrap: =
break-word; -webkit-nbsp-mode: space; -webkit-line-break: =
after-white-space; "><span class=3D"Apple-style-span" =
style=3D"border-collapse: separate; color: rgb(0, 0, 0); font-family: =
Helvetica; font-size: 14px; font-style: normal; font-variant: normal; =
font-weight: normal; letter-spacing: normal; line-height: normal; =
orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; =
widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; =
-webkit-border-vertical-spacing: 0px; =
-webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0px; "><div style=3D"word-wrap: =
break-word; -webkit-nbsp-mode: space; -webkit-line-break: =
after-white-space; "><span class=3D"Apple-style-span" =
style=3D"border-collapse: separate; color: rgb(0, 0, 0); font-family: =
Helvetica; font-size: 14px; font-style: normal; font-variant: normal; =
font-weight: normal; letter-spacing: normal; line-height: normal; =
orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; =
widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; =
-webkit-border-vertical-spacing: 0px; =
-webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0px; "><div style=3D"word-wrap: =
break-word; -webkit-nbsp-mode: space; -webkit-line-break: =
after-white-space; "><span class=3D"Apple-style-span" =
style=3D"border-collapse: separate; color: rgb(0, 0, 0); font-family: =
Helvetica; font-size: 14px; font-style: normal; font-variant: normal; =
font-weight: normal; letter-spacing: normal; line-height: normal; =
orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; =
widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; =
-webkit-border-vertical-spacing: 0px; =
-webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0px; "><div style=3D"word-wrap: =
break-word; -webkit-nbsp-mode: space; -webkit-line-break: =
after-white-space; "><span class=3D"Apple-style-span" =
style=3D"border-collapse: separate; color: rgb(0, 0, 0); font-family: =
Helvetica; font-size: 14px; font-style: normal; font-variant: normal; =
font-weight: normal; letter-spacing: normal; line-height: normal; =
orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; =
widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; =
-webkit-border-vertical-spacing: 0px; =
-webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0px; "><div style=3D"word-wrap: =
break-word; -webkit-nbsp-mode: space; -webkit-line-break: =
after-white-space; "><span class=3D"Apple-style-span" =
style=3D"border-collapse: separate; color: rgb(0, 0, 0); font-family: =
Helvetica; font-size: 14px; font-style: normal; font-variant: normal; =
font-weight: normal; letter-spacing: normal; line-height: normal; =
orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; =
widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; =
-webkit-border-vertical-spacing: 0px; =
-webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: =
auto; -webkit-text-stroke-width: 0px; "><div style=3D"word-wrap: =
break-word; -webkit-nbsp-mode: space; -webkit-line-break: =
after-white-space; "><div><span class=3D"Apple-style-span" =
style=3D"font-size: 12px; "><div style=3D"font-size: 12px; =
">=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D</div><div style=3D"font-size: 12px; ">Monique Yeaton</div><div =
style=3D"font-size: 12px; ">IT Security Awareness Consultant</div><div =
style=3D"font-size: 12px; ">MIT Information Services & Technology =
(IS&T)</div><div style=3D"font-size: 12px; ">(617) =
253-2715</div><div style=3D"font-size: 12px; "><a =
href=3D"http://web.mit.edu/ist/security">http://web.mit.edu/ist/security</=
a></div></span></div><div><br></div><div><span class=3D"Apple-style-span" =
style=3D"color: rgb(192, 0, 0); font-family: Arial; font-size: 12px; =
font-weight: bold; =
">---------------------------------------</span></div><div><font =
class=3D"Apple-style-span" color=3D"#C00000" face=3D"Arial" =
size=3D"3"><span class=3D"Apple-style-span" style=3D"font-size: 12px; =
"><b><span class=3D"Apple-style-span" style=3D"color: rgb(0, 0, 0); =
font-family: Helvetica; font-size: 14px; font-weight: normal; =
"><div><font class=3D"Apple-style-span" color=3D"#C00000" face=3D"Arial" =
size=3D"3"><span class=3D"Apple-style-span" style=3D"font-size: 12px; =
"><b>Important: DO NOT GIVE OUT YOUR =
PASSWORDS! </b></span></font></div><div><font =
class=3D"Apple-style-span" color=3D"#C00000" face=3D"Arial" =
size=3D"3"><span class=3D"Apple-style-span" style=3D"font-size: 12px; =
"><b>Ignore emails asking you to provide yours. IS&T will *NEVER* =
ask you for your =
password. </b></span></font></div></span></b></span></font></div></di=
v></span></div></span></div></span></div></span></div></span></div></span>=
</div></span></div></span></div></span> </div><br></body></html>=
--Apple-Mail-3--917574999--
--===============1602083053==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
ist-security-fyi mailing list
ist-security-fyi@mit.edu
To Unsubscribe http://mailman.mit.edu/mailman/listinfo/ist-security-fyi
--===============1602083053==--
