<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><title>Untitled Document</title><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
h1
{mso-style-priority:9;
mso-style-link:"Heading 1 Char";
margin-top:13.2pt;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:24.0pt;
font-family:"Times New Roman","serif";
color:#C8102E;
font-weight:bold;}
h2
{mso-style-priority:9;
mso-style-link:"Heading 2 Char";
margin-top:13.2pt;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:18.0pt;
font-family:"Times New Roman","serif";
color:#C8102E;
font-weight:bold;}
h3
{mso-style-priority:9;
mso-style-link:"Heading 3 Char";
margin-top:13.2pt;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:13.5pt;
font-family:"Times New Roman","serif";
color:#C8102E;
font-weight:bold;}
h4
{mso-style-priority:9;
mso-style-link:"Heading 4 Char";
margin-top:13.2pt;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:#C8102E;
font-weight:bold;}
h5
{mso-style-priority:9;
mso-style-link:"Heading 5 Char";
margin-top:13.2pt;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:10.0pt;
font-family:"Times New Roman","serif";
color:#C8102E;
font-weight:bold;}
h6
{mso-style-priority:9;
mso-style-link:"Heading 6 Char";
margin-top:13.2pt;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:7.5pt;
font-family:"Times New Roman","serif";
color:#C8102E;
font-weight:bold;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#C8102E;
text-decoration:none none;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#C8102E;
text-decoration:none none;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.Heading1Char
{mso-style-name:"Heading 1 Char";
mso-style-priority:9;
mso-style-link:"Heading 1";
font-family:"Cambria","serif";
color:#365F91;
font-weight:bold;}
span.Heading2Char
{mso-style-name:"Heading 2 Char";
mso-style-priority:9;
mso-style-link:"Heading 2";
font-family:"Cambria","serif";
color:#4F81BD;
font-weight:bold;}
span.Heading3Char
{mso-style-name:"Heading 3 Char";
mso-style-priority:9;
mso-style-link:"Heading 3";
font-family:"Cambria","serif";
color:#4F81BD;
font-weight:bold;}
span.Heading4Char
{mso-style-name:"Heading 4 Char";
mso-style-priority:9;
mso-style-link:"Heading 4";
font-family:"Cambria","serif";
color:#4F81BD;
font-weight:bold;
font-style:italic;}
span.Heading5Char
{mso-style-name:"Heading 5 Char";
mso-style-priority:9;
mso-style-link:"Heading 5";
font-family:"Cambria","serif";
color:#243F60;}
span.Heading6Char
{mso-style-name:"Heading 6 Char";
mso-style-priority:9;
mso-style-link:"Heading 6";
font-family:"Cambria","serif";
color:#243F60;
font-style:italic;}
p.red, li.red, div.red
{mso-style-name:red;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:#CC0000;}
span.red1
{mso-style-name:red1;
color:#CC0000;}
span.EmailStyle26
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1042946443;
mso-list-template-ids:1079572992;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body bgcolor="#888B8D" lang=EN-US link="#C8102E" vlink="#C8102E"><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Good afternoon,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Please read over this important message from the campus UIT Security group. It contains information regarding recent surge of spam and phishing emails.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Thanks,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><div><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Kiet Luong<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Director of Engineering Computing<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>College Information Security Officer<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Cullen College of Engineering<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>University of Houston<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Email: KietL@uh.edu<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Voice: 713.743.9974<o:p></o:p></span></p></div><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> University Information Technology [mailto:it@uh.edu] <br><b>Sent:</b> Monday, July 20, 2015 1:42 PM<br><b>To:</b> Luong, Kiet A<br><b>Subject:</b> UIT Security Informational Alert: Increased Phishing/Spam Messages<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><div align=center><table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 width=600 style='width:6.25in;border-collapse:collapse'><tr><td style='background:white;padding:0in 0in 0in 0in'><table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 width="100%" style='width:100.0%;border-collapse:collapse'><tr><td valign=top style='padding:18.75pt 18.75pt 18.75pt 18.75pt'><table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 width="100%" style='width:100.0%;border-collapse:collapse'><tr><td style='padding:.75pt .75pt 7.5pt .75pt'><p class=MsoNormal style='line-height:20.4pt'><span style='font-size:10.5pt;font-family:"Arial","sans-serif"'><img width=538 height=129 id="_x0000_i1025" src="http://uh.edu/ecomm/images/UIT.png" alt=Image><o:p></o:p></span></p></td></tr><tr><td valign=top style='padding:.75pt .75pt .75pt .75pt'><p style='line-height:20.4pt'><span style='font-size:10.5pt;font-family:"Arial","sans-serif"'>UH Faculty and Staff:<o:p></o:p></span></p><p style='line-height:20.4pt'><span style='font-size:10.5pt;font-family:"Arial","sans-serif"'>In the last couple of weeks, there has been a significant increase in phishing and spam messages being received in campus e-mail boxes. We understand your frustrations as we are personally experiencing the same things, as are many of our higher-education colleagues across the country. Here is information about actions we are taking and things you can do to help. <o:p></o:p></span></p><p style='line-height:20.4pt'><span style='font-size:10.5pt;font-family:"Arial","sans-serif"'>What is UH Doing?<o:p></o:p></span></p><p style='line-height:20.4pt'><span style='font-size:10.5pt;font-family:"Arial","sans-serif"'>The UIT Security, Messaging and Network enterprise teams have all been working together with our vendors (Sophos, McAfee, Microsoft and others) to address the problems. We have been and are continuing to review every step in the messaging process including the scanning, flagging and blocking protocols being used and have been aggressively working to identify and implement improvements. We have also been investigating each message being reported, which has in turn led to the blocking of some foreign Internet Service Providers (ISPs) identified as being the source of malicious messages. We are coordinating our investigation efforts with universities nationwide as well as the FBI and other appropriate agencies.<o:p></o:p></span></p><p style='line-height:20.4pt'><span style='font-size:10.5pt;font-family:"Arial","sans-serif"'>Throughout the UH campus, college, division and department information security officers, technology managers and other IT staff have been diligently working with users to verify appropriate mail filtering rules and protections are in place on client devices and mailboxes. We appreciate all of these efforts, as well as the actions by campus faculty and staff to report the malicious messages. <o:p></o:p></span></p><p style='line-height:20.4pt'><span style='font-size:10.5pt;font-family:"Arial","sans-serif"'>We understand that these actions may not be enough to handle messaging threats as they continue to escalate overall. Therefore, we are also working with other technology leaders to identify innovative strategies and solutions to these problems that can be implemented as soon as practical. <o:p></o:p></span></p><p style='line-height:20.4pt'><span style='font-size:10.5pt;font-family:"Arial","sans-serif"'>What Should You Do?<o:p></o:p></span></p><ol start=1 type=1><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:20.4pt;mso-list:l0 level1 lfo1'><span class=red1><span style='font-size:10.5pt;font-family:"Arial","sans-serif"'>Continue to be critical of emails you may receive.</span></span><span style='font-size:10.5pt;font-family:"Arial","sans-serif"'> Malicious emails may be well-crafted, appear to come from others at UH and are designed to trick you into providing personal information. <o:p></o:p></span></li><ul type=circle><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:20.4pt;mso-list:l0 level2 lfo1'><span style='font-size:10.5pt;font-family:"Arial","sans-serif"'>Do not click on links in messages that are asking for personal or account information. <o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:20.4pt;mso-list:l0 level2 lfo1'><span style='font-size:10.5pt;font-family:"Arial","sans-serif"'>Do not open attachments you are not expecting. <o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:20.4pt;mso-list:l0 level2 lfo1'><span style='font-size:10.5pt;font-family:"Arial","sans-serif"'>Report suspicious emails to UIT Security for investigation.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:20.4pt;mso-list:l0 level2 lfo1'><span style='font-size:10.5pt;font-family:"Arial","sans-serif"'>Forward spam messages to <a href="mailto:is-spam@sophos.com">is-spam@sophos.com</a>. Messages forwarded to Sophos contribute to the accurate identification of future spam messages. <o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:20.4pt;mso-list:l0 level2 lfo1'><span style='font-size:10.5pt;font-family:"Arial","sans-serif"'>Check for yourself: A list of recent phishing emails reported at UH is posted on the UIT Security website and on the AccessUH login page.<o:p></o:p></span></li></ul><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:20.4pt;mso-list:l0 level1 lfo1'><span class=red1><span style='font-size:10.5pt;font-family:"Arial","sans-serif"'>Protect your UH identity.</span></span><span style='font-size:10.5pt;font-family:"Arial","sans-serif"'><o:p></o:p></span></li><ul type=circle><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:20.4pt;mso-list:l0 level2 lfo1'><span style='font-size:10.5pt;font-family:"Arial","sans-serif"'>Do not re-use your UH userid or password on any non-UH websites (Facebook, LinkedIn, etc). <o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:20.4pt;mso-list:l0 level2 lfo1'><span style='font-size:10.5pt;font-family:"Arial","sans-serif"'>Do not use the same password for your online banking that you use on social media or shopping sites. <o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:20.4pt;mso-list:l0 level2 lfo1'><span style='font-size:10.5pt;font-family:"Arial","sans-serif"'>When you change your password, update the password on all of your devices.<o:p></o:p></span></li></ul><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:20.4pt;mso-list:l0 level1 lfo1'><span class=red1><span style='font-size:10.5pt;font-family:"Arial","sans-serif"'>Protect your devices. </span></span><span style='font-size:10.5pt;font-family:"Arial","sans-serif"'><o:p></o:p></span></li><ul type=circle><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:20.4pt;mso-list:l0 level2 lfo1'><span style='font-size:10.5pt;font-family:"Arial","sans-serif"'>Keep your computer/mobile devices current with all system and application updates. <o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:20.4pt;mso-list:l0 level2 lfo1'><span style='font-size:10.5pt;font-family:"Arial","sans-serif"'>Install anti-virus/anti-spyware software and configure for automatic updates. <o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:20.4pt;mso-list:l0 level2 lfo1'><span style='font-size:10.5pt;font-family:"Arial","sans-serif"'>Keep your devices locked-up and out of sight when not in use.<o:p></o:p></span></li><li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:20.4pt;mso-list:l0 level2 lfo1'><span style='font-size:10.5pt;font-family:"Arial","sans-serif"'>If you get a new device, erase all of your info from any old device before discarding it.<o:p></o:p></span></li></ul></ol><p style='line-height:20.4pt'><span style='font-size:10.5pt;font-family:"Arial","sans-serif"'>If you have any questions or concerns please contact UIT Security via email at <a href="mailto:security@uh.edu">security@uh.edu</a> or via phone at 832-842-4695.<o:p></o:p></span></p><p style='line-height:20.4pt'><span style='font-size:10.5pt;font-family:"Arial","sans-serif"'>Mary E. Dickerson, MBA, CISSP, CISM, PMP <br>Executive Director, IT Security <br>Chief Information Security Officer <br>University of Houston | University of Houston System <br>A Carnegie-designated Tier One public research university<br>phone: 832-842-4679 <br>email: <a href="mailto:mdickerson@uh.edu">mdickerson@uh.edu</a><o:p></o:p></span></p></td></tr></table></td></tr></table></td></tr><tr><td style='padding:0in 0in 0in 0in'><p class=MsoNormal style='line-height:20.4pt'><span style='font-size:10.5pt;font-family:"Arial","sans-serif"'> <o:p></o:p></span></p></td></tr><tr><td style='padding:0in 0in 0in 0in'><p class=MsoNormal align=center style='text-align:center;line-height:20.4pt'><span style='font-size:10.5pt;font-family:"Arial","sans-serif"'><a href="http://uhhelpdesk.custhelp.com/rd?1=AvNI~wopDv8S~xb~Gv9O~yJBHf0q04D78N_Nfz7~Pv9E&2=17215"><img border=0 id="_x0000_i1026" src="https://ssl.uh.edu/images/social/twitter-2.png"></a><a href="http://uhhelpdesk.custhelp.com/rd?1=AvNI~wopDv8S~xb~Gv9O~yJBHf0q04D78N_Nfz7~Pv9E&2=17216"><img border=0 id="_x0000_i1027" src="https://ssl.uh.edu/images/social/facebook.png"></a><a href="http://uhhelpdesk.custhelp.com/rd?1=AvNI~wopDv8S~xb~Gv9O~yJBHf0q04D78N_Nfz7~Pv9E&2=17217"><img border=0 id="_x0000_i1028" src="https://ssl.uh.edu/images/social/google-plus.png"></a><a href="http://uhhelpdesk.custhelp.com/rd?1=AvNI~wopDv8S~xb~Gv9O~yJBHf0q04D78N_Nfz7~Pv9E&2=17218"><img border=0 id="_x0000_i1029" src="https://ssl.uh.edu/images/social/linkedin.png"></a><a href="http://uhhelpdesk.custhelp.com/rd?1=AvNI~wopDv8S~xb~Gv9O~yJBHf0q04D78N_Nfz7~Pv9E&2=17219"><img border=0 id="_x0000_i1030" src="https://ssl.uh.edu/images/social/youtube.png"></a><a href="http://uhhelpdesk.custhelp.com/rd?1=AvNI~wopDv8S~xb~Gv9O~yJBHf0q04D78N_Nfz7~Pv9E&2=17220"><img border=0 id="_x0000_i1031" src="https://ssl.uh.edu/images/social/instagram-new.png"></a><o:p></o:p></span></p></td></tr><tr><td style='padding:0in 0in 0in 0in'><p class=MsoNormal align=center style='text-align:center;line-height:20.4pt'><span style='font-size:10.5pt;font-family:"Arial","sans-serif"'>This is an official message sent by the University of Houston. To verify the validity of this message, visit uh.edu/phishing or email <a href="mailto:security@uh.edu"><u>security@uh.edu</u></a>.<o:p></o:p></span></p></td></tr></table></div><p class=MsoNormal><img border=0 width=1 height=1 id="_x0000_i1032" src="http://uhhelpdesk.custhelp.com/rd/AvNI~wopDv8S~xb~Gv9O~yJBHf0q04D78N_Nfz7~Pv9E.gif"><o:p></o:p></p></div></body></html>