<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:MiloOT-Ita;}
@font-face
{font-family:MiloOT;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Spear phishing alert - subject line "New Message For You."<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">PLEASE DELETE <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal">Good afternoon everyone,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">We have posted a spear phish that contains the following text:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left:.5in">From: <strong><span style="font-family:"Calibri",sans-serif;color:maroon">UAlert [EMAIL ADDRESS REMOVED]</span></strong><strong><span style="font-family:"Calibri",sans-serif">
</span></strong><br>
Subject: New Message For You.<br>
<br>
<strong><span style="font-family:"Calibri",sans-serif;color:maroon">[EMAIL ADDRESS REMOVED],</span></strong><br>
You have 2 new messages from your Faculty, view log sheet below;<br>
<strong><span style="font-family:"Calibri",sans-serif;color:maroon">Continue_Here: [URL REMOVED]</span></strong><strong><span style="font-family:"Calibri",sans-serif">
</span></strong><br>
Best Regards<br>
UA Mail Management.<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.5in"><o:p> </o:p></p>
<p class="MsoNormal">One of our Liaisons was able to provide us with a screenshot that appears when the link in the email is clicked:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><img width="576" height="445" style="width:6.0in;height:4.6354in" id="Picture_x0020_1" src="cid:image001.jpg@01D2EB54.B7AB6910"><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">As you can see, it could easily fool many of us.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Please let your departments know that this email is circulating. We have posted it to both our alerts and social media, but wanted to take an extra step of alerting campus of this scam.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks for your help!<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Best wishes,<o:p></o:p></p>
<p class="MsoNormal">Teresa<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b><span style="font-size:13.0pt;font-family:MiloOT-Ita;color:#0C234B">Teresa E. Banks<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:MiloOT;color:#0C234B">Manager, Information Security
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:MiloOT;color:#0C234B"> & Compliance Programs<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:MiloOT;color:#0C234B">UA Information Security<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:MiloOT;color:#0C234B">The University of Arizona<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:MiloOT;color:#0C234B"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:MiloOT;color:#0C234B">Email:
<a href="mailto:tbanks@email.arizona.edu"><span style="color:#0C234B">tbanks@email.arizona.edu</span></a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:MiloOT;color:#0C234B">Office: 520.621.8476<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:MiloOT;color:#0C234B">Cell: 520.909.6057<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:MiloOT;color:#0C234B">Web:
<a href="http://security.arizona.edu/"><span style="color:#0C234B">http://security.arizona.edu</span></a><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>