<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body text="#000000" bgcolor="#ffffff">
Engineering Computing support personnel have identified a
significant threat to users of dynamic IP address within the
University wired ethernet network.<br>
<br>
The threat consists of compromised systems on the campus network
that are directing computers to a Malware distribution site that
will display the below text asking you to update your browser. If
the user clicks the "Browser update" button, a trojan executable
will be downloaded and run, compromising the system. Engineering
Computing has not yet identified the Trojan. If you see a screen
similar to the one below, DO NOT CLICK to update.<br>
<br>
<img alt="Firefox screendump"
src="cid:part1.06090101.00020208@egr.uh.edu" height="552"
width="553"><br>
<br>
University computers that are not at their assigned address or have
been moved to a new location may default to dynamic addressing via
DHCP. Non-University (i.e. Personally Owned) computers are not
authorized to be connected to the wired network and should only
access the wireless network. Until this Trojan is identified, we
will not know if our current anti-virus software is effective
against its installation.<br>
<br>
Please report to Engineering Computing if you have seen this screen
and downloaded the Trojan software. We do want to examine your
computer in this case.<br>
<pre class="moz-signature" cols="100">--
Bryan Bales
Systems Analyst II
Engineering Computing Center
Cullen College of Engineering
University of Houston
713-743-0766
</pre>
</body>
</html>