Educause Security Discussion mailing list archives

Re: DOJ letter regarding case 288A-NY-303468


From: "Don M. Blumenthal" <don () DONBLUMENTHAL COM>
Date: Wed, 8 Feb 2012 12:00:54 -0500

My phish paranoia kicked in also, so I verified the number for Laura Riso and called. I got a recording but it included 
the fact that the letters are related to Operation GhostClick and DNSChanger malaware.

http://www.fbi.gov/news/stories/2011/november/malware_110911

Don 


On Feb 8, 2012, at 9:44 AM, O'Callaghan, Daniel wrote:

We received one Jan 26th, and have received similar in the past.  It looks a lot like a phish, but is legit.  If you 
follow the directions to log-in to the portal, you should get a list of compromised IPs registered to your domain, 
and sometimes time stamps.
I think this case is related to the ChronoPay takedown last year.
 
___________________________________
Daniel V. O'Callaghan, Jr., MBA, CISSP
Chief Information Security Officer
Sinclair Community College
444 W Third St, 13-000B
Dayton, OH 45402
937.512.2452
 
 
 
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Mark 
Reboli
Sent: Wednesday, February 08, 2012 9:34 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] DOJ letter regarding case 288A-NY-303468
 
Has anyone received a letter from the US DOJ regarding the above case? 
 
<image001.jpg>
Mark Reboli
Network/Telecom/IT security Manager
Misericordia University
570-674-6753
 


Current thread: