<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Monotype Corsiva";
panose-1:3 1 1 1 1 2 1 1 1 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
mso-add-space:auto;
font-size:12.0pt;
font-family:"Calibri","sans-serif";}
p.MsoListParagraphCxSpFirst, li.MsoListParagraphCxSpFirst, div.MsoListParagraphCxSpFirst
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
mso-add-space:auto;
font-size:12.0pt;
font-family:"Calibri","sans-serif";}
p.MsoListParagraphCxSpMiddle, li.MsoListParagraphCxSpMiddle, div.MsoListParagraphCxSpMiddle
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
mso-add-space:auto;
font-size:12.0pt;
font-family:"Calibri","sans-serif";}
p.MsoListParagraphCxSpLast, li.MsoListParagraphCxSpLast, div.MsoListParagraphCxSpLast
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
mso-add-space:auto;
font-size:12.0pt;
font-family:"Calibri","sans-serif";}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#003366;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1693068057;
mso-list-type:hybrid;
mso-list-template-ids:1242752796 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>Phishing alert<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='color:black'>Dear UA Community – one of the current phishing attacks that the University of Arizona community is experiencing involves asking recipients to copy and paste URLs into a browser. Spammers are learning that users are getting wise about clicking links in emails. One thing to consider when it appears that an email may be coming from a U of A department is that the URL should be directing you to a link with arizona.edu on the end. The most recent example had “net.ms” on the end. <o:p></o:p></span></p><p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:black'>Following is a message that is being sent to the student community. We wanted to share the information with you via our Information Security Liaisons so that you are informed as well on how to recognize these “spear phishing” attempts, and how to react to them.<o:p></o:p></span></p><p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:black'>If you have any questions, please don’t hesitate to contact the Information Security Office at 621-8476.<o:p></o:p></span></p><p class=MsoNormal><span style='color:black'>Thanks,<o:p></o:p></span></p><p class=MsoNormal><span style='color:black'>Teresa<o:p></o:p></span></p><p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-size:13.0pt;font-family:"Monotype Corsiva";color:#003366'>Teresa E. Banks<o:p></o:p></span></b></p><p class=MsoNormal><span style='font-size:10.0pt;color:#003366'>Manager, Information Security <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;color:#003366'> & Compliance Programs<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;color:#003366'>University Information Security Office<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;color:#003366'>University of Arizona<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;color:#003366'>P. O. Box 210073<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;color:#003366'>Tucson, AZ 85721-0073<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;color:#003366'><a href="mailto:tbanks@email.arizona.edu">tbanks@email.arizona.edu</a><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;color:#003366'><a href="http://security.arizona.edu">http://security.arizona.edu</a><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;color:#003366'>Phone: (520) 621-UISO (8476)<o:p></o:p></span></p><p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:black'>UA email account holders are being targeted with an increased number of fraudulent emails that claim to be from Arizona.edu administrators, UITS, the UA email accounts system, or similar sources. <o:p></o:p></span></p><p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:black'>Many of these emails request that account holders share their username and password with the sender, often threatening to deactivate or delete email accounts if recipients do not reply quickly. Some emails even include a link to take the viewer to a login page. These links use authentic-looking URLs, including fake links to the UA WebAuth login page. Keep in mind that a legitimate email will never ask you to reply and give private information, such as a username, password, or date of birth. </span><span style='font-size:14.0pt;font-family:"Arial","sans-serif";color:black'><o:p></o:p></span></p><p class=MsoNormal><span style='color:black'> </span><span style='font-size:14.0pt;font-family:"Arial","sans-serif";color:black'><o:p></o:p></span></p><p class=MsoNormal><span style='color:black'>If you receive an unsolicited email or you are unsure of the sender (especially one asking for username and password—UA personnel will <b>NEVER</b> ask you to reveal your password):</span><span style='font-size:14.0pt;font-family:"Arial","sans-serif";color:black'><o:p></o:p></span></p><p class=MsoListParagraphCxSpFirst style='text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='font-size:14.0pt;font-family:Symbol;color:black'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><b><span style='color:black'>Do Not Reply</span></b><span style='font-size:14.0pt;font-family:"Arial","sans-serif";color:black'><o:p></o:p></span></p><p class=MsoListParagraphCxSpMiddle style='text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='font-size:14.0pt;font-family:Symbol;color:black'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><b><span style='color:black'>Do Not Click on any links </span></b><span style='font-size:14.0pt;font-family:"Arial","sans-serif";color:black'><o:p></o:p></span></p><p class=MsoListParagraphCxSpMiddle style='text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='font-size:14.0pt;font-family:Symbol;color:black'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><b><span style='color:black'>Do Not Open any attached files</span></b><span style='font-size:14.0pt;font-family:"Arial","sans-serif";color:black'><o:p></o:p></span></p><p class=MsoListParagraphCxSpLast style='text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span style='font-size:14.0pt;font-family:Symbol;color:black'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><b><span style='color:black'>Delete the message immediately</span></b><span style='font-size:14.0pt;font-family:"Arial","sans-serif";color:black'><o:p></o:p></span></p><p class=MsoNormal><span style='color:black'> </span><span style='font-size:14.0pt;font-family:"Arial","sans-serif";color:black'><o:p></o:p></span></p><p class=MsoNormal><span style='color:black'>We have illustrated an example of the latest phishing scam and pointed out the telltale signs. You can find this example at <b>security.arizona.edu/phishingexample</b>. We encourage you to safely practice examining this example by opening a browser (i.e., Internet Explorer, Google Chrome, etc.), and copying and pasting the URL into the browser window. <o:p></o:p></span></p><p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:black'>If you have already responded to such a message, please change your NetID password immediately at netid.arizona.edu and have your computer checked out for malware. </span><span style='font-size:14.0pt;font-family:"Arial","sans-serif";color:black'><o:p></o:p></span></p><p class=MsoNormal><span style='color:black'> </span><span style='font-size:14.0pt;font-family:"Arial","sans-serif";color:black'><o:p></o:p></span></p><p class=MsoNormal><span style='color:black'>While UA personnel will <b>NEVER</b> ask you to reveal personal information by email, phone, text, or other means of communication, you will be asked periodically to change your UA NetID password as a security measure. If you receive a communication telling you that it is time to change your password, or need to change or reset your password for another reason, you should open a new web browser window and navigate to <b>netid.arizona.edu</b>, or call the 24/7 IT Support Center at 626-TECH (8324) for assistance. </span><span style='font-size:14.0pt;font-family:"Arial","sans-serif";color:black'><o:p></o:p></span></p><p class=MsoNormal><span style='color:black'> </span><span style='font-size:14.0pt;font-family:"Arial","sans-serif";color:black'><o:p></o:p></span></p><p class=MsoNormal><span style='color:black'>Refer to <b>security.arizona.edu/phishing</b> for additional information and advice about these and other kinds of email phishing attacks.</span><span style='font-size:14.0pt;font-family:"Arial","sans-serif";color:black'><o:p></o:p></span></p><p class=MsoNormal><span style='color:black'> </span><span style='font-size:14.0pt;font-family:"Arial","sans-serif";color:black'><o:p></o:p></span></p><p class=MsoNormal><span style='color:black'>Thank you,</span><span style='font-size:14.0pt;font-family:"Arial","sans-serif";color:black'><o:p></o:p></span></p><p class=MsoNormal><span style='color:black'>The UA Information Security Office</span><span style='font-size:14.0pt;font-family:"Arial","sans-serif";color:black'><o:p></o:p></span></p><p class=MsoNormal><span style='color:black'>Gil Salazar, Kelley Bogart, & Teresa Banks</span><span style='font-size:14.0pt;font-family:"Arial","sans-serif";color:black'><o:p></o:p></span></p><p class=MsoNormal><span style='color:black'> </span><span style='font-size:14.0pt;font-family:"Arial","sans-serif";color:black'><o:p></o:p></span></p><p class=MsoNormal><span style='color:black'> </span><span style='font-size:14.0pt;font-family:"Arial","sans-serif";color:black'><o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='color:#003366'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#003366'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;color:#003366'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;color:#003366'><o:p> </o:p></span></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>