<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>Good morning,<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Many of us received this email (below) this past week, and wondered if it’s legitimate. Hopefully by now, we’ve all become better at analyzing suspicious emails. These are the facts I found in this email:<o:p></o:p></p><p class=MsoNormal>-The sender (lkelly@mris) is someone unknown to us. How you determine the “true” sender is to hover the cursor over the email address to reveal the actual email address. The label “AccessUH” in front of the email address should NEVER be a consideration when assessing legitimacy of the email. This label can be created by anyone, including hackers who aim their attacks at UH employees by using UH known words.<o:p></o:p></p><p class=MsoNormal>-The “To:” address may or may not be an actual email address, but it is irrelevant to us individually. Additionally, the address “secure@uh.edu” and subject “Unusual Sign in Attempt” are meant to create a sense of importance, fear or panic, and hopes for us act without further consideration. <o:p></o:p></p><p class=MsoNormal>-In the event one of your accounts experience unusual login attempts, UIT security will contact us, then we will contact you. It is highly unlikely UIT security will contact you directly and ask you to do something to correct an issue with your accounts without including us. <o:p></o:p></p><p class=MsoNormal>-You can always determine the web address of any web link by hovering the cursor over the link without clicking on it. In this case, “Preview details” points to “http:secure-my-uh-edu.jimdo.com”. The emphasis is on the xxx.com, which shows that this website is nowhere close to being a UH web link. Besides, <span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>you can never solve an UH account problem by clicking on a link, much less a link that takes you to a non-UH website.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>-Finally, there are no official UH signatures, or names who you can contact to verify this email with. <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>Hope this helps you to identify legitimacy of this and other future suspicious emails.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal>Kiet Luong<o:p></o:p></p><p class=MsoNormal>Director of Engineering Computing<o:p></o:p></p><p class=MsoNormal>College Information Security Officer<o:p></o:p></p><p class=MsoNormal>Cullen College of Engineering<o:p></o:p></p><p class=MsoNormal>University of Houston<o:p></o:p></p><p class=MsoNormal>Email: KietL@uh.edu<o:p></o:p></p><p class=MsoNormal>Voice: 713.743.9974<o:p></o:p></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'> </span><o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><b>From:</b> AccessUH <<a href="mailto:lkelly@mris.com">lkelly@mris.com</a>> (or<span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> UH Security [<a href="mailto:lkelly@mris.com">mailto:lkelly@mris.com</a>]</span>)<br><b>Date:</b> November 27, 2015 at 6:09:09 AM CST<br><b>To:</b> "<a href="mailto:secure@uh.edu">secure@uh.edu</a>" <<a href="mailto:secure@uh.edu">secure@uh.edu</a>><br><b>Subject:</b> <b>Unusual Sign in Attempt</b><o:p></o:p></p><p style='margin:0in;margin-bottom:.0001pt;word-wrap: break-word'><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'> <o:p></o:p></span></p><p style='margin:0in;margin-bottom:.0001pt;word-wrap: break-word'><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'><a href="http://secure-my-uh-edu.jimdo.com/">PREVIEW DETAILS</a><o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>