<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
p.xmsonormal, li.xmsonormal, div.xmsonormal
{mso-style-name:x_msonormal;
margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle22
{mso-style-type:personal-compose;
font-family:"Times New Roman",serif;
color:#212121;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1027" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<div>
<p class="MsoNormal" style="background:white"><span style="color:#212121">Good morning all!<o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><span style="color:#212121"><o:p> </o:p></span></p>
<p class="MsoNormal" style="background:white"><span style="color:#212121">It’s a new year and a new phishing attempt is out there. . .this time from “Shane Burgess”. As you may recall several people received emails from “Jeff Silvertooth” before the holidays
asking for the status of those pesky gift cards he was owed. Please share the information below from AVP Ratje with your employees as a reminder of the steps to take should they receive one of these email messages.<o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><span style="color:#212121"><o:p> </o:p></span></p>
<p class="MsoNormal" style="background:white"><span style="color:#212121">Thanks,<o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><span style="color:#212121">Carolyne<o:p></o:p></span></p>
</div>
<div id="ms-outlook-mobile-signature">
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
<div id="divRplyFwdMsg">
<div>
<p class="MsoNormal"><b>FORWARDED MESSAGE:<o:p></o:p></b></p>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="xmsonormal"><span style="font-size:12.0pt">Unit Heads, Academic BOs, and EC members,</span><o:p></o:p></p>
<p class="xmsonormal"><span style="font-size:12.0pt"> </span><o:p></o:p></p>
<p class="xmsonormal"><span style="font-size:12.0pt">Repeated spear phishing attempts that purport to be from Shane have been sent to multiple people over the last month. The sender uses organizational information from the CALS and ALVSCE websites to prompt
you to share your cell phone number and other personal information, or to urge a payment. If they are doing this against Shane, the bad guys may also be doing this against others, including you. Be aware and encourage faculty and staff to scrutinize suspicious
or strange emails before responding.</span><o:p></o:p></p>
<p class="xmsonormal"><span style="font-size:12.0pt"> </span><o:p></o:p></p>
<p class="xmsonormal"><b><span style="font-size:12.0pt">How to tell if it isn’t Shane?</span></b><o:p></o:p></p>
<p class="xmsonormal"><span style="font-size:12.0pt">Check out the sender’s email address. They are from a fake gmail account called “deandivision74” or derivative. Other emails may even be from an “@email.arizona.edu” address but do not use Shane’s NetID
as the prefix. The emails often contain spelling mistakes like “Regardsz.”</span><o:p></o:p></p>
<p class="xmsonormal"><span style="font-size:12.0pt"> </span><o:p></o:p></p>
<p class="xmsonormal"><b><span style="font-size:12.0pt">What to do?</span></b><o:p></o:p></p>
<p class="xmsonormal"><span style="font-size:12.0pt">If you see these and are unsure, you can always text Shane directly to confirm that he contacted you. If you know they are phishing attempts, please forward them to the UITS Info Security Office to be researched,
catalogued, and blocked in the system: <a href="mailto:phish@arizona.edu">phish@arizona.edu</a>. Additional info from the ISO
<a href="https://security.arizona.edu/content/report-phish">here</a>.</span><o:p></o:p></p>
<p class="xmsonormal"><span style="font-size:12.0pt"> </span><o:p></o:p></p>
<p class="xmsonormal"><span style="font-size:12.0pt">Do not click on links in the email and block the sender. Matt and your unit’s cyber professional are the experts and great resources if you have questions.</span><o:p></o:p></p>
<p class="xmsonormal"><span style="font-size:9.0pt"> </span><o:p></o:p></p>
<p class="xmsonormal"><span style="font-size:12.0pt"> </span><o:p></o:p></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><!--[if gte vml 1]><v:shapetype id="_x0000_t75" coordsize="21600,21600" o:spt="75" o:preferrelative="t" path="m@4@5l@4@11@9@11@9@5xe" filled="f" stroked="f">
<v:stroke joinstyle="miter" />
<v:formulas>
<v:f eqn="if lineDrawn pixelLineWidth 0" />
<v:f eqn="sum @0 1 0" />
<v:f eqn="sum 0 0 @1" />
<v:f eqn="prod @2 1 2" />
<v:f eqn="prod @3 21600 pixelWidth" />
<v:f eqn="prod @3 21600 pixelHeight" />
<v:f eqn="sum @0 0 1" />
<v:f eqn="prod @6 1 2" />
<v:f eqn="prod @7 21600 pixelWidth" />
<v:f eqn="sum @8 21600 0" />
<v:f eqn="prod @7 21600 pixelHeight" />
<v:f eqn="sum @10 21600 0" />
</v:formulas>
<v:path o:extrusionok="f" gradientshapeok="t" o:connecttype="rect" />
<o:lock v:ext="edit" aspectratio="t" />
</v:shapetype><v:shape id="Picture_x0020_2" o:spid="_x0000_s1026" type="#_x0000_t75" alt="image0" style='position:absolute;margin-left:0;margin-top:0;width:60pt;height:48pt;z-index:251658240;visibility:visible;mso-wrap-style:square;mso-width-percent:0;mso-height-percent:0;mso-wrap-distance-left:0;mso-wrap-distance-top:0;mso-wrap-distance-right:0;mso-wrap-distance-bottom:0;mso-position-horizontal:left;mso-position-horizontal-relative:text;mso-position-vertical:absolute;mso-position-vertical-relative:line;mso-width-percent:0;mso-height-percent:0;mso-width-relative:page;mso-height-relative:page' o:allowoverlap="f">
<v:imagedata src="cid:image002.png@01D801FF.584B7CA0" o:title="image0" />
<w:wrap type="square" anchory="line"/>
</v:shape><![endif]--><![if !vml]><img width="80" height="64" style="width:.8333in;height:.6666in" src="cid:image002.png@01D801FF.584B7CA0" align="left" alt="image0" v:shapes="Picture_x0020_2"><![endif]><o:p></o:p></p>
</td>
<td width="500" style="width:375.0pt;padding:0in 0in 0in 0in">
<p class="xmsonormal" style="margin-bottom:12.0pt"><b><span style="font-size:14.0pt;color:#0C234B">Jeff Ratje</span></b><span style="font-size:10.0pt;color:#767676"><br>
</span>Associate Vice President, Finance Admin Operations<br>
Division of Agriculture, Life and Vet Sciences & Cooperative Extension<br>
THE UNIVERSITY OF ARIZONA<span style="font-size:10.0pt;color:#767676"><br>
<br>
Forbes, 314c<br>
PO Box 210036 | Tucson, AZ 85721<br>
Office: 520-621-1468</span><span style="font-size:9.0pt;color:#767676"><br>
</span><a href="mailto:jmratje@email.arizona.edu"><span style="color:#767676;text-decoration:none">jmratje@email.arizona.edu</span></a><br>
<b><a href="https://www.compass.arizona.edu/"><span style="color:#8B0015;text-decoration:none">www.compass.arizona.edu</span></a></b><o:p></o:p></p>
</td>
</tr>
</tbody>
</table>
<p class="xmsonormal"><span style="color:white"> </span><o:p></o:p></p>
<p class="xmsonormal"> <o:p></o:p></p>
</div>
</div>
</div>
</body>
</html>