Computer Security Threats

Posted by: Bob Bayn on Jan 15, 2015

Evil Email Attachments

Now that phishing spammers are back from their holiday vacation, evil email attachments are on the upswing.  They may pretend to be package delivery notices, invoices, tax audits, or other good or bad news.  But they end up being bearers of banking trojans or other malware.

If you initial response to an unexpected email message is "What?" or "Oh, No!" then pause before you click on that attachment!  It is more likely to be a spamming hacker than what it claims to be.

If you are confident that the message is bogus, you can help other recipients by forwarding the bogus message AS AN ATTACHMENT (ctrl-alt-F in Outlook) to spam@usu.edu to help the spam filter to learn about that particular mischief.

If you are uncertain and want a second opinion before clicking, forward the bogus message to phish@usu.edu for manual evaluation by the IT Security Team.  If the hazard is real, we will reply as well as warn others and report and block the mischief in whatever ways are available to us.

Here are some typical messages that we and others have seen lately:


From: HSBC Advising Service [mailto:no-replay@support-hsbc.com]
Subject: Payment Advice - Advice Ref:[GB657074] / CHAPS credits

Sir/Madam,

Please download document from dropbox, payment advice is issued at the request of our customer. The advice is for your reference only.

Download link:   http://darioscarpetcleaning.com/HSBC_DATA/get_document.html

Yours faithfully,
Global Payments and Cash Management
HSBC


Google Drive
   Hector Heathcliffe used Google drive to share Secured File with you securely as at 14/01/2015

DOUBLECLICKHERE |Download files

scan011.pdf
            
scan012.pdf

From: akhwe.blvvqzvza@traxxxxxure.com
Attachments: Bank Slip.htm‎ (660 B‎)
 
Wednesday, January 14, 2015 7:19 AM

Good Day,

Please we are very sorry for the delays in making the payment, we have
remitted the outstanding payment.

Find attached BANK SLIP of the payment made to your bank account and our
new order on the attach file.

kindly confirm as soon as you receive the payment in your bank account.

KHP Steel Product (M) Sdn.Bhd.


Subject: Payment Overdue
Attachment: Invoice.doc (36KB)

Hello.
Thank you for choosing our services.
Please see the attached invoice.

Invoice Date: Tue, 13 Jan 2015
Thank you for your assistance in this matter,

Mark Miller
Senior Statistician
Fairbanks Intl Airport