[CCoE Notice] FW: UIT Security Alert: Phishing/Malware Messages

[Luong, Kiet A]

Good morning,

I tried to send out an alert yesterday regarding the bogus email that everyone received, but my email was quarantined due to the blockage of the bogus email I included in the message.  The email below is an official alert sent by UIT security.  Please read the email and do not open the bogus email mentioned in the alert.

In the event that you accidentally opened the attachment, unzipped it, AND opened the fake pdf file, please let me know.   Thankfully, many of you caught the suspicious email and alerted me of it.  Thank you for staying alert to stay ahead of all these scams.

Kiet Luong
Manager, Desktop Support & Windows Servers
Cullen College of Engineering
Email: KietL at uh.edu
Voice: 713.743.9974

From: University Information Technology [mailto:it at uh.edu]
Sent: Tuesday, October 08, 2013 2:46 PM
To: Luong, Kiet A
Subject: UIT Security Alert: Phishing/Malware Messages


[http://uh.edu/ecomm/images/banner_uit_email.jpg]





This is an official alert issued by UH IT Security. To verify the validity of this message, you can visit the UH IT website at uh.edu/uit or contact UIT Security at 832-842-4695 or via email at security at uh.edu<mailto:security at uh.edu>.

**************************************

UH Faculty and Staff:

Many faculty and staff have reported receiving messages today with the subject, "Annual Form - Authorization to Use Privately Owned Vehicle on State Business." This email informs the reader that in order to use their personal vehicle for University business, they must annually to fill out and sign the attached form and have it signed by their supervisor.

This is NOT a legitimate University of Houston email.

Rather, this message is designed to trick unsuspecting users into opening the attachment. The attachment contains malicious software that will infect the computer when opened. The email looks like it was sent by a University of Houston employee using their UH account (the employee name varies widely), but this address is spoofed, and the message is not legitimate. Users should NOT open the attached file and should delete this email immediately. If you have opened the attachment please contact your local IT Support person, your College/Department Information Security Officer,or IT Security at 832.842.4695 or via email at security at uh.edu<mailto:security at uh.edu>.

What should you do?

 1.  If you receive a message such as described above, do not open the attachment or click on any website links included in the message. Delete the message.
 2.  If you already have opened the attachment please contact your local IT Support person, your College/Department Information Security Officer, IT Security at security at uh.edu<mailto:security at uh.edu> or via phone at 832-842-4695.
 3.  If you are unsure about the validity of a message, you may forward it to UIT Security at security at uh.edu<mailto:security at uh.edu> for assistance.
 4.  As always, please make sure that your computer is fully up to date with software and anti-virus updates. Contact your local IT support for assistance if necessary.

We appreciate all of your diligence in assisting in the protection of university information resources.




Brian M. Walker, MIS, CISM, CISSP
Manager, IT Security
University of Houston
phone: 832-842-8495 fax: 713-743-2743
email: bmw at uh.edu<mailto:bmw at uh.edu>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://Bug.EGR.UH.EDU/pipermail/engi-dist/attachments/20131009/138d76b5/attachment.html