[CED/CD/EAT] Fwd: information

[Silvertooth, Jeffrey C - (silverto)]

FYI...

Sent from my iPhone

Begin forwarded message:

From: "Gregoire, Tod A - (gregoire)" <gregoire at email.arizona.edu<mailto:gregoire at email.arizona.edu>>
Date: June 29, 2019 at 18:02:17 MST
To: "Rahr, Matt - (rahr)" <rahr at ag.arizona.edu<mailto:rahr at ag.arizona.edu>>, "Silvertooth, Jeffrey C - (silverto)" <Silver at ag.arizona.edu<mailto:Silver at ag.arizona.edu>>
Cc: "security at arizona.edu<mailto:security at arizona.edu>" <security at arizona.edu<mailto:security at arizona.edu>>
Subject: Re: information

Wow! That's way better than I could have explained it, thanks and nice job.

T
________________________________
From: Rahr, Matt - (rahr)
Sent: Saturday, June 29, 2019 6:00:12 PM
To: Silvertooth, Jeffrey C - (silverto)
Cc: security at arizona.edu<mailto:security at arizona.edu>; Gregoire, Tod A - (gregoire)
Subject: RE: information

Hey Jeff,

Unfortunately, there’s nothing preventing a savvy spammer from creating a new Gmail account in your likeness, in this case, silver.ag.arizona.edu at gmail.com<mailto:silver.ag.arizona.edu at gmail.com>. We can, however, send this to the Information Security Office and see if they can block this specific address at the campus email gateway (cc’ed).

Down the road, UITS will add additional security measures that will display colored warnings/banners in our email program when replying to an email from an external sender. So in this case, I would be warned with an, “EXTERNAL SENDER” at the top of my email program, and only show the email address, silver.ag.arizona.edu at gmail.com<mailto:silver.ag.arizona.edu at gmail.com>, (replacing the “Silvertooth, Jeffrey” name) in the From:/To: fields, in hopes that I would find it suspicious you’d email me from a non-UA address. Judy was savvy enough to catch this without that warning- a trick that is covered in the mandatory IT Security training we took online this past Spring.

Hopefully these strategies will pay out. In the meantime, you may want to forward this email to your direct reports, letting them know there’s a spear phishing attempt happening right now. If these bad actors went through the process of creating a Gmail account in your name, they may have hunted down an Org Chart somewhere online and are targeting individuals you would regularly email. I will let the rest of CALS IT know as well.

Thanks,
Matt

Matt Rahr
Director, Communications and Cyber Technologies Unit
Associate Director, Arizona Experiment Station
Divison of Agriculture, Life & Veterinary Sciences and Cooperative Extension
https://cct.cals.arizona.edu - 520-626-0329


From: Silvertooth, Jeffrey C - (silverto) <Silver at ag.arizona.edu<mailto:Silver at ag.arizona.edu>>
Sent: Saturday, June 29, 2019 1:42 PM
To: Rahr, Matt - (rahr) <rahr at ag.arizona.edu<mailto:rahr at ag.arizona.edu>>; Gregoire, Tod A - (gregoire) <gregoire at email.arizona.edu<mailto:gregoire at email.arizona.edu>>
Subject: Fwd: information

Matt & Tod:

FYI....

Can you please help me get this fixed with regard to the email capture that someone has taken on my address?

Thank you very much,

Jeff


Thank you very much,

Jeff


Get Outlook for iOS<https://aka.ms/o0ukef>
________________________________
From: Silvertooth, Jeffrey C - (silverto) <Silver at ag.arizona.edu<mailto:Silver at ag.arizona.edu>>
Sent: Saturday, June 29, 2019 13:40
To: Brown, Judith K - (jkbrown)
Subject: Re: information

Judy,

Thank you very much for letting me know.

Have a good weekend.

Jeff

Get Outlook for iOS<https://aka.ms/o0ukef>
________________________________
From: Brown, Judith K - (jkbrown)
Sent: Saturday, June 29, 2019 8:44:09 AM
To: Silvertooth, Jeffrey C - (silverto)
Subject: information

Hi Jeff

Someone is sending messages by email claiming to be you with the email address below.
You may want to ask the IT folks to alert others.


Jeffrey C. Silvertooth <silver.ag.arizona.edu at gmail.com<mailto:silver.ag.arizona.edu at gmail.com>>


Dr. Judith K. Brown
School of Plant Sciences
1140 E. South Campus Dr.
Forbes Bld. #303
The University of Arizona
Tucson, AZ 85704 USA

Office Phone: 520-621-1402
Lab Phone: 520-621-1230
Cell Phone: 520-490-2109
Email: jbrown at ag.arizona.edu<mailto:jbrown at ag.arizona.edu>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://list.cals.arizona.edu/pipermail/ced/attachments/20190630/a65cd8a9/attachment.htm>