<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Georgia;
panose-1:2 4 5 2 5 4 5 2 3 3;}
@font-face
{font-family:"Agency FB";
panose-1:2 11 5 3 2 2 2 2 2 4;}
@font-face
{font-family:"Brush Script Std";}
@font-face
{font-family:inherit;
panose-1:0 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:MiloOT-Ita;}
@font-face
{font-family:MiloOT;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<div style="mso-element:para-border-div;border:none;border-bottom:dotted #D7B875 1.5pt;padding:0in 0in 9.0pt 0in;background:white">
<p class="MsoNormal" style="margin-bottom:11.25pt;mso-line-height-alt:21.0pt;background:white;vertical-align:baseline;border:none;padding:0in">
<span style="font-size:26.5pt;font-family:"Georgia",serif;color:#A71313;letter-spacing:-.6pt">5/2/16 File Message!<o:p></o:p></span></p>
</div>
<p class="MsoNormal" style="margin-bottom:11.25pt;line-height:16.8pt;background:white;vertical-align:baseline">
<span style="font-family:"inherit",serif;color:black">UA Information Security received a phishing email report, where recipients are directed to click on a link and use their "UAccess credentials" to login to a site.<br>
<br>
If you receive this email, please delete it from your inbox. If you clicked on the link, entered any information, or responded to the email in any way, please contact your local IT Support or the 24/7 IT Support Center (626-8324) as soon as possible.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:11.25pt;line-height:16.8pt;background:white;vertical-align:baseline">
<span style="font-family:"inherit",serif;color:black"> <o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:11.25pt;line-height:16.8pt;background:white;vertical-align:baseline">
<span style="font-family:"inherit",serif;color:black">Email text:<o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:16.8pt;background:white;vertical-align:baseline">
<span style="font-family:"inherit",serif;color:black">FROM: Dropbox </span><b><span style="font-family:"inherit",serif;color:maroon;border:none windowtext 1.0pt;padding:0in"><EMAIL ADDRESS REMOVED></span></b><span style="font-family:"inherit",serif;color:black"><br>
SUBJECT: File Message!<br>
<br>
Hi!<br>
<br>
You just received a file through Dropbox Share Application.<br>
Please click the link below or paste it on your web browser and log in with your UAccess credentials to view.<br>
<br>
</span><b><span style="font-family:"inherit",serif;color:maroon;border:none windowtext 1.0pt;padding:0in"><URL REMOVED></span></b><span style="font-family:"inherit",serif;color:black"><br>
<br>
Every time a friend installs Dropbox, we'll give both of you 1 GB of space for free!<br>
<br>
Need even more space? Upgrade your Dropbox and get 1 TB (1,000 GB) of space.<br>
<br>
Thanks,<br>
- The Dropbox Team<br>
<br>
Dropbox, Inc., </span><b><span style="font-family:"inherit",serif;color:maroon;border:none windowtext 1.0pt;padding:0in">ADDRESS REMOVED</span></b><span style="font-family:"inherit",serif;color:black"> © 2016 Dropbox<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><i><span style="font-size:14.0pt;font-family:"Brush Script Std";color:#1F497D">Mario A. Marquez<br>
Systems Administrator Principal<br>
University of Arizona<br>
College of Agriculture and Life Sciences<br>
School of Plant Sciences<br>
<a href="http://www.plssupport.arizona.edu/">http://www.plssupport.arizona.edu/</a><br>
<a href="mailto:marquezm@email.arizona.edu">marquezm@email.arizona.edu</a></span></i></b><span style="font-size:14.0pt;font-family:"Brush Script Std";color:#1F497D"><br>
<b><i>Office 520-621-1257<br>
Cell 520-429-2902<o:p></o:p></i></b></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:12.0pt;font-family:"Times New Roman",serif;color:#1F497D"><img border="0" width="198" height="96" id="Picture_x0020_1" src="cid:image001.gif@01D1A537.FDB70770" alt="UAriz-CALS-logo-247"></span><span style="font-size:14.0pt;font-family:"Agency FB",sans-serif;color:#1F497D"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> uainfosec-request@list.arizona.edu [mailto:uainfosec-request@list.arizona.edu]
<b>On Behalf Of </b>Banks, Teresa E - (tbanks)<br>
<b>Sent:</b> Tuesday, May 3, 2016 12:15 PM<br>
<b>To:</b> uainfosec@list.arizona.edu<br>
<b>Subject:</b> [uainfosec] spear phishing incident today<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Good afternoon,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">We have received a report of a spear phish with the subject line “File Message.” The sender directs the recipient to click on a link in the email and login using “Uaccess credentials” in order to receive a dropbox file.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Please inform your units of the phish, and that we have posted it at hxxp://security.arizona.edu/phishing-alerts/5216-file-message (copy and paste the URL, and replace “hxxp” with “http”).<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks for your help!<o:p></o:p></p>
<p class="MsoNormal">Teresa<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b><span style="font-size:13.0pt;font-family:MiloOT-Ita;color:#0C234B">Teresa E. Banks<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:MiloOT;color:#0C234B">Manager, Information Security
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:MiloOT;color:#0C234B"> & Compliance Programs<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:MiloOT;color:#0C234B">UA Information Security<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:MiloOT;color:#0C234B">The University of Arizona<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:MiloOT;color:#0C234B"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:MiloOT;color:#0C234B">Email:
<a href="mailto:tbanks@email.arizona.edu"><span style="color:#0C234B">tbanks@email.arizona.edu</span></a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:MiloOT;color:#0C234B">Office: 520.621.8476<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:MiloOT;color:#0C234B">Cell: 520.909.6057<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:MiloOT;color:#0C234B">Web:
<a href="http://security.arizona.edu/"><span style="color:#0C234B">http://security.arizona.edu</span></a><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>