[CCoE Notice] Fw: UH Information Technology

[Luong, Kiet A]

Good afternoon,


I've been asked to forward this email to you all to note that it is a phishing email.  Please analyze the email yourself, then see if you can identify the same red flags I do in this email.  These are just a few that I saw quickly:

  1.
Email "From:" address is from eonbit.com, which is NOT a UH email address
  2.
The sender addresses to a general audience.  By itself this is not a red flag, but coupled with other red flags, this can be suspicious
  3.
The "Login" button takes you to a w ww.tinyurl.com<http://www.tinyurl.com>... website, which is not a UH website
  4.
The gist if the message is to announce a new technology for UH VPN.  We all know that such important announcements like this should originate or forwarded from myself or my colleagues.
  5.
A legitimate University IT (UIT) message usually has the information of the person sending the email in the signature.  This email has what seems to be UH logos, but lack other important information that make up a legitimate email.

Please keep in mind that even if one "red flag" is identified, the email becomes a suspicious email.  It's not the other way around where one legitimate item makes the whole email legitimate.  If there are five legitimate items and one "red flag", then email is still considered suspicious.

Thank you for staying alert to sort through SPAM and phishing emails.
Kiet Luong
Director of Engineering Computing
College Information Security Officer
Cullen College of Engineering
University of Houston
Email: KietL at uh.edu<mailto:KietL at uh.edu>
Voice: 713.743.9974

Begin forwarded message:

From: University of Houston <houston at eonbit.com<mailto:houston at eonbit.com>>
Date: November 25, 2017 at 10:50:11 AM GMT+7
To: <skhator at uh.edu<mailto:skhator at uh.edu>>
Subject: UH Information Technology

[cid:uh.png]

Notice to all Faculty, staff, and student.

We have upgraded Cisco anyconnect vpn client software, please click the login button to reactivate your UH SSL VPN Service access.

[cid:urs.png]<https://tinyurl.com/yby4d9p8>

This is a technology that allows UH SSL VPN Service Faculty, Staff, Students, and Retirees to securely access the UH SSL VPN Service Network from anywhere with an Internet connection.

All connections are logged and monitored. By accessing this system, you acknowledge that use of this and any other technology at UH SSL VPN is subject to the terms of the UH SSL VPN Conditions of Use and Policy on Computing Ethics


[cid:uhn.png]

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://Bug.EGR.UH.EDU/pipermail/engi-dist/attachments/20171125/d57b42ed/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: uh.png
Type: image/png
Size: 6289 bytes
Desc: uh.png
Url : http://Bug.EGR.UH.EDU/pipermail/engi-dist/attachments/20171125/d57b42ed/attachment-0003.png 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: urs.png
Type: image/png
Size: 805 bytes
Desc: urs.png
Url : http://Bug.EGR.UH.EDU/pipermail/engi-dist/attachments/20171125/d57b42ed/attachment-0004.png 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: uhn.png
Type: image/png
Size: 5016 bytes
Desc: uhn.png
Url : http://Bug.EGR.UH.EDU/pipermail/engi-dist/attachments/20171125/d57b42ed/attachment-0005.png