Re: Phishing Attack

[Ronald King <ronald.king () MORGAN EDU>]

Thank you all who have responded.

*Ronald A. King, CISSP*
Chief Information Security Officer
Morgan State University Office: (443) 885-3372
1700 E. Cold Spring Ln. Email: ronald.king () morgan edu
Baltimore, MD 21251 URL: http://www.morgan.edu

*Growing the future ... Leading the world*
<http://www.morgan.edu/Documents/ABOUT/StrategicPlan/StrategicPlan2011-21_Final.pdf>


On Thu, Sep 21, 2017 at 9:07 AM, Victor Fayed <fayedv () meredith edu> wrote:

> We did get a few hundred of these with a link to the "password
> verification form" being hosted on PageCloud.
>
> It's worth mentioning that Pagecloud's support were pretty quick
> responding and taking the malicious site down.
>
> *************************Sample***********************
>
> From: *Meredith College* <
> ​...####​
> whangasurf@
> ​....​
> clear.net.nz
> <https://urldefense.proofpoint.com/v2/url?u=http-3A__clear.net.nz_&d=DwMFaQ&c=0CCt47_3RbNABITTvFzZbA&r=hF9utfnfkGfY793x81M4Gr0nwxs9KYTZ6TUPUh4wPjs&m=CAeKzzmxr_y8JkU0TftcMgcH-gcsn3C0h2gqs2ywpVo&s=8_PGD3a7zoDFgzJEv8PT1MP3R4u0R1LonNbpia07sX4&e=>
> ​####​
> >
> Date: Tuesday, September 19, 2017
> Subject: Alert!!
> To: info
> ​..##
> @
> ​##​
> mail
> ​##​
> .##com
>
>
> Meredith College performs computer system and network
> infrastructure maintenance, verify your email before the
> next 24hours:
> ​http##:##/
> /##meredithedu
> ​​
> .pagecloud
> ​###
> c
> ​o
> m
> ​##
>
> *************************Sample***********************
>
> ​Regards,
>
> Victor Fayed
> Office of Technology Services
> Meredith College
> ​3800 Hillsborough Street
> <https://maps.google.com/?q=3800+Hillsborough+StreetRaleigh,+NC+27607&entry=gmail&source=g>
> Raleigh, NC 27607
> <https://maps.google.com/?q=3800+Hillsborough+StreetRaleigh,+NC+27607&entry=gmail&source=g>
> ​
>
>
> Technology Services will never ask for your password... Never give your
> passwords to anybody
> ​.
>
> On Wed, Sep 20, 2017 at 9:52 PM, Ronald King <ronald.king () morgan edu>
> wrote:
>
> > Anyone else get bombarded with a phishing attack with sites created on
> > Yolasite or Pagecloud tonight? Just checking to see how targeted it may
> > have been.
> >
> > Thanks,
> > *Ronald A. King, CISSP*
> > Chief Information Security Officer
> > Morgan State University Office: (443) 885-3372
> > 1700 E. Cold Spring Ln
> > <https://urldefense.proofpoint.com/v2/url?u=https-3A__maps.google.com_-3Fq-3D1700-2BE.-2BCold-2BSpring-2BLn-26entry-3Dgmail-26source-3Dg&d=DwMFaQ&c=0CCt47_3RbNABITTvFzZbA&r=hF9utfnfkGfY793x81M4Gr0nwxs9KYTZ6TUPUh4wPjs&m=CAeKzzmxr_y8JkU0TftcMgcH-gcsn3C0h2gqs2ywpVo&s=gBuG08z6jbzc7RPJLju9-ndHggDA263yt3ZbEQaN46U&e=>
> > . Email: ronald.king () morgan edu
> > Baltimore, MD 21251 URL: http://www.morgan.edu
> >
> > *Growing the future ... Leading the world*
> > <http://www.morgan.edu/Documents/ABOUT/StrategicPlan/StrategicPlan2011-21_Final.pdf>