<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1027" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Good morning,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">I want to pass along this suspicious email below, and to analyze it with you all so we can get better at recognizing these. These are the “red flags” that I
can identify from this email:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">-the person sending the email may have a UH email address, but we don’t know who that person is. The name appears to be a UH student. I don’t think IT Security
or any UH records will use a student to send out mass emails to everyone, threatening to permanently disable accounts if not verified<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">-the main message of the email is to ask you to verify your account or it will be permanently disabled, but the subject mentions MX records (which I know nothing
about)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">-when hovering the curser over the link, you can see that the “verify now” link goes to: https//bit.do.fgh8u. This is definitely not a UH website <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">-a legitimate UH system administrator will never threaten to permanently disable an account if they are not verified. Emails from me would have gone out beforehand,
letting everyone know if an action needs to be taken.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">-always check for grammatical errors since scams often originate from overseas. This suspicious email has several grammatical errors
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">-the signature is vague and does not have an individual contact info for the person sending the email. Even then, we should verify by calling the person to confirm
a suspicious message, using the UH address book/directory<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Here is a link to IT Security’s advise on how to recognize SPAM and Phishing emails:
</span><a href="https://uh.edu/infotech/security/secure-data/spam-phishing/">https://uh.edu/infotech/security/secure-data/spam-phishing/</a><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Please keep these strategies in mind when analyzing suspicious emails in the future.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Thanks and stay safe.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Kiet Luong</span><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Director of Engineering Computing</span><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">College Information Security Officer</span><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Cullen College of Engineering</span><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">University of Houston</span><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Email:
<a href="mailto:KietL@uh.edu">KietL@uh.edu</a></span><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Voice: 713.743.9974</span><span style="color:#1F497D"><o:p></o:p></span></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><b>From:</b> "Banawan, Ahmed A" <<a href="mailto:aabanawa@Central.UH.EDU">aabanawa@Central.UH.EDU</a>><br>
<b>Date:</b> July 17, 2020 at 8:23:47 AM CDT<br>
<b>Subject:</b> <b>Please Update MX-Records for University of Houston</b><o:p></o:p></p>
</div>
</blockquote>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal"><span style="font-family:"Tahoma",sans-serif"></span> <o:p>
</o:p></p>
<div>
<div align="center">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%;background:white;border-collapse:collapse;text-size-adjust: 100%;background-size: cover;background-position-x:50%;background-position-y:50%">
<tbody>
<tr style="height:345.0pt">
<td width="708" style="width:1009.5pt;padding:7.5pt 7.5pt 7.5pt 7.5pt;height:345.0pt;text-size-adjust: 100%">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%;border-collapse:collapse;text-size-adjust: 100%">
<tbody>
<tr>
<td style="padding:.75pt .75pt .75pt .75pt;text-size-adjust: 100%;max-width: 600px !important">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%;border-collapse:collapse;text-size-adjust: 100%">
<tbody>
<tr>
<td style="padding:.75pt .75pt .75pt .75pt;text-size-adjust: 100%;min-width: 100%">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" align="left" width="100%" style="width:100.0%;border-collapse:collapse;text-size-adjust: 100%">
<tbody>
<tr>
<td style="padding:.75pt .75pt .75pt .75pt;text-size-adjust: 100%;min-width: 100%">
<p class="MsoNormal"><img width="295" style="width:3.0729in" src="https://mcusercontent.com/8b63db7840ef4db29ac4731fa/images/d1171720-9a00-421b-9fe7-578d1b82e505.png" align="left"><o:p></o:p></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td style="padding:.75pt .75pt .75pt .75pt;text-size-adjust: 100%">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%;border-collapse:collapse;text-size-adjust: 100%;min-width: 100%">
<tbody>
<tr>
<td style="padding:10.5pt 13.5pt 10.5pt 13.5pt;text-size-adjust: 100%;min-width: 100%">
<table class="MsoNormalTable" border="1" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%;border-collapse:collapse;border:none;text-size-adjust: 100%;min-width: 100%">
<tbody>
<tr>
<td style="border:none;border-top:solid #EAEAEA 1.5pt;padding:.75pt .75pt .75pt .75pt;text-size-adjust: 100%;min-width: 100%">
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><o:p> </o:p></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%;border-collapse:collapse;text-size-adjust: 100%;min-width: 100%">
<tbody>
<tr>
<td style="padding:6.75pt .75pt .75pt .75pt;text-size-adjust: 100%">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" align="left" width="100%" style="width:100.0%;border-collapse:collapse;text-size-adjust: 100%">
<tbody>
<tr>
<td style="padding:0in 13.5pt 6.75pt 13.5pt;text-size-adjust: 100%;max-width: 100%;min-width: 100%">
<p class="MsoNormal" style="line-height:18.0pt"><strong><span style="font-family:"Helvetica",sans-serif;color:#202020">Your account has been held for your protection.</span></strong><span style="font-family:"Helvetica",sans-serif;color:#202020"><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td style="padding:.75pt .75pt .75pt .75pt;text-size-adjust: 100%">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%;border-collapse:collapse;text-size-adjust: 100%;min-width: 100%">
<tbody>
<tr>
<td style="padding:6.75pt .75pt .75pt .75pt;text-size-adjust: 100%;min-width: 100%">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" align="left" width="100%" style="width:100.0%;border-collapse:collapse;text-size-adjust: 100%">
<tbody>
<tr>
<td style="padding:0in 13.5pt 6.75pt 13.5pt;text-size-adjust: 100%;max-width: 100%;min-width: 100%">
<p class="MsoNormal" style="line-height:13.5pt"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:#202020">Please log on here now Houston Account Verification and follow the instructions.<br>
If you fail to do this, Your account will be permanently blocked.<o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><o:p> </o:p></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%;border-collapse:collapse;text-size-adjust: 100%;min-width: 100%">
<tbody>
<tr>
<td style="padding:13.5pt 13.5pt 13.5pt 13.5pt;text-size-adjust: 100%;min-width: 100%">
<table class="MsoNormalTable" border="1" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%;border-collapse:collapse;border:none;text-size-adjust: 100%;min-width: 100%">
<tbody>
<tr>
<td style="border:none;border-top:solid #EAEAEA 1.5pt;padding:.75pt .75pt .75pt .75pt;text-size-adjust: 100%;min-width: 100%">
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><o:p> </o:p></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%;border-collapse:collapse;text-size-adjust: 100%;min-width: 100%">
<tbody>
<tr>
<td style="padding:0in 13.5pt 13.5pt 13.5pt;text-size-adjust: 100%">
<table class="MsoNormalTable" border="0" cellpadding="0" style="background:#DD2980;text-size-adjust: 100%">
<tbody>
<tr>
<td style="padding:10.5pt 10.5pt 10.5pt 10.5pt;text-size-adjust: 100%;border-radius: 4px">
<p class="MsoNormal" align="center" style="text-align:center"><span style="font-size:10.0pt;font-family:"Arial",sans-serif"><a href="https://bit.do/fGH8U" target="_blank" title="Verify Now"><b><span style="color:white;letter-spacing:-.75pt">Verify Now</span></b></a><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><o:p> </o:p></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%;border-collapse:collapse;text-size-adjust: 100%;min-width: 100%">
<tbody>
<tr>
<td style="padding:13.5pt 13.5pt 13.5pt 13.5pt;text-size-adjust: 100%;min-width: 100%">
<table class="MsoNormalTable" border="1" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%;border-collapse:collapse;border:none;text-size-adjust: 100%;min-width: 100%">
<tbody>
<tr>
<td style="border:none;border-top:solid #EAEAEA 1.5pt;padding:.75pt .75pt .75pt .75pt;text-size-adjust: 100%;min-width: 100%">
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><o:p> </o:p></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%;border-collapse:collapse;text-size-adjust: 100%;min-width: 100%">
<tbody>
<tr>
<td style="padding:6.75pt .75pt .75pt .75pt;text-size-adjust: 100%">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" align="left" width="100%" style="width:100.0%;border-collapse:collapse;text-size-adjust: 100%">
<tbody>
<tr>
<td style="padding:0in 13.5pt 6.75pt 13.5pt;text-size-adjust: 100%;max-width: 100%;min-width: 100%">
<p class="MsoNormal" style="line-height:13.5pt"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:#202020">Thank You<br>
University of Houston<o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><o:p> </o:p></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%;border-collapse:collapse;text-size-adjust: 100%;min-width: 100%">
<tbody>
<tr>
<td style="padding:6.75pt .75pt .75pt .75pt;text-size-adjust: 100%">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" align="left" width="100%" style="width:100.0%;border-collapse:collapse;text-size-adjust: 100%">
<tbody>
<tr>
<td style="padding:0in 13.5pt 6.75pt 13.5pt;text-size-adjust: 100%;max-width: 100%;min-width: 100%">
<p class="MsoNormal" style="line-height:13.5pt"><strong><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:#202020">© 2020 University of Houston. All rights reserved.</span></strong><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:#202020"><br>
<br>
<strong><span style="font-family:"Helvetica",sans-serif">Please do not reply to this message. Mails sent to this address cannot be answered.</span></strong><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</div>
<p class="MsoNormal"><span style="font-family:"Calibri",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
</div>
</blockquote>
</div>
</body>
</html>