<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><title>Untitled Document</title><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
h2
{mso-style-priority:9;
mso-style-link:"Heading 2 Char";
margin-top:0in;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:13.5pt;
font-family:"Times New Roman","serif";
color:#CC0000;
font-weight:normal;}
h3
{mso-style-priority:9;
mso-style-link:"Heading 3 Char";
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:#CC0000;
font-weight:normal;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#CC0000;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#CC0000;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.Heading2Char
{mso-style-name:"Heading 2 Char";
mso-style-priority:9;
mso-style-link:"Heading 2";
font-family:"Cambria","serif";
color:#4F81BD;
font-weight:bold;}
span.Heading3Char
{mso-style-name:"Heading 3 Char";
mso-style-priority:9;
mso-style-link:"Heading 3";
font-family:"Cambria","serif";
color:#4F81BD;
font-weight:bold;}
p.tablebg, li.tablebg, div.tablebg
{mso-style-name:tablebg;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
background:#CCCCCC;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.smalltext, li.smalltext, div.smalltext
{mso-style-name:smalltext;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:7.5pt;
font-family:"Times New Roman","serif";}
p.date, li.date, div.date
{mso-style-name:date;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:white;
letter-spacing:1.5pt;
font-weight:bold;}
p.centered, li.centered, div.centered
{mso-style-name:centered;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
text-align:center;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.larger, li.larger, div.larger
{mso-style-name:larger;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:16.5pt;
font-family:"Times New Roman","serif";}
p.medium, li.medium, div.medium
{mso-style-name:medium;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.red, li.red, div.red
{mso-style-name:red;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:#CC0000;}
span.EmailStyle27
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:2009399910;
mso-list-template-ids:1986055458;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#CC0000" vlink="#CC0000"><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>FYI<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><div><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Kiet Luong<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Manager, Desktop Support & Windows Servers<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Cullen College of Engineering<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Email: KietL@uh.edu<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Voice: 713.743.9974<o:p></o:p></span></p></div><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> University Information Technology [mailto:it@uh.edu] <br><b>Sent:</b> Monday, October 21, 2013 12:31 PM<br><b>To:</b> Luong, Kiet A<br><b>Subject:</b> UIT Security Alert: New Round of Malware Email Messages<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 width=600 style='width:6.25in'><tr><td style='padding:0in 0in 0in 0in'><p class=MsoNormal style='line-height:125%'><span style='font-size:10.0pt;line-height:125%;font-family:"Arial","sans-serif"'><img id="_x0000_i1025" src="http://uh.edu/ecomm/images/banner_uit_email.jpg" alt=Image><o:p></o:p></span></p></td></tr><tr><td style='padding:0in 0in 0in 0in'></td></tr><tr><td style='padding:0in 0in 0in 0in'><p class=MsoNormal style='line-height:125%'><span style='font-size:10.0pt;line-height:125%;font-family:"Arial","sans-serif"'> <o:p></o:p></span></p></td></tr><tr><td style='padding:0in 0in 0in 0in'><p style='line-height:125%'><span style='font-size:10.0pt;line-height:125%;font-family:"Arial","sans-serif"'>UH Faculty and Staff:<br><br>Many faculty and staff have reported receiving messages today with the subject, "FW: Last Month Remit." The email looks like it was sent from a University of Houston account (the address varies), but this address is spoofed. The email has a .zip file attached to the message.<br><br>This is NOT a legitimate University of Houston email.<br><br>The attachment contains malicious software that will infect the computer when opened. UIT is working to prevent these types of messages from appearing in your university email account. If you receive this message, do NOT open the attached file and delete this email immediately. If you have opened the attachment please contact your local IT Support person, your College/Department Information Security Officer, or IT Security at 832.842.4695 or via email at <a href="mailto:security@uh.edu">security@uh.edu</a>.<br><br>Users should never open attachments they are not expecting to receive. If they are unsure about the validity of a message, they may forward it to UIT Security at <a href="mailto:security@uh.edu">security@uh.edu</a> for assistance.<br><br>What should you do?<o:p></o:p></span></p><ol start=1 type=1><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:125%;mso-list:l0 level1 lfo1'><span style='font-size:10.0pt;line-height:125%;font-family:"Arial","sans-serif"'>If you receive a message such as described above, do not open the attachment or click on any website links included in the message. Delete the message.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:125%;mso-list:l0 level1 lfo1'><span style='font-size:10.0pt;line-height:125%;font-family:"Arial","sans-serif"'>If you already have opened the attachment, please contact your local IT Support person, your College/Department Information Security Officer, IT Security at <a href="mailto:security@uh.edu">security@uh.edu</a> or via phone at 832-842-4695.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:125%;mso-list:l0 level1 lfo1'><span style='font-size:10.0pt;line-height:125%;font-family:"Arial","sans-serif"'>If you are unsure about the validity of a message, you may forward it to UIT Security at <a href="mailto:security@uh.edu">security@uh.edu</a> for assistance.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:125%;mso-list:l0 level1 lfo1'><span style='font-size:10.0pt;line-height:125%;font-family:"Arial","sans-serif"'>As always, please make sure that your computer is fully up to date with software and anti-virus updates. Contact your local IT support for assistance if necessary.<o:p></o:p></span></li></ol><p style='line-height:125%'><span style='font-size:10.0pt;line-height:125%;font-family:"Arial","sans-serif"'>We appreciate all of your diligence in assisting in the protection of university information resources.<br><br><br>Brian M. Walker, MIS, CISM, CISSP<br>Manager, IT Security<br>University of Houston<br>phone: 832-842-8495 fax: 713-743-2743<br>email: <a href="mailto:bmw@uh.edu">bmw@uh.edu</a><o:p></o:p></span></p></td></tr></table><p class=MsoNormal style='line-height:125%'><span style='font-size:10.0pt;line-height:125%;font-family:"Arial","sans-serif"'><img border=0 width=1 height=1 id="_x0000_i1026" src="http://uhhelpdesk.custhelp.com/rd/AvU2~wrvPv8Sly39GtMe~yL~Jvsq~4D~8N9ofzr~.gif"><o:p></o:p></span></p></div></body></html>