Re: Fake Direct Deposit Forms

[Rich Lang <richard.lang () DOMAIL MARICOPA EDU>]

Greetings Ron,

We have seen similar attempts with complete user data provided by the
actors.

Thanks,
Rich

RICHARD C. LANG, CSSLP

MARICOPA COMMUNITY COLLEGES

Director Information Technology,

Security & Planning - Red Team

2419 West 14th Street, Tempe AZ 85281

480.731.8873 | 480.731.8850

richard.lang () domail maricopa edu

www.maricopa.edu

Shuttle Tydirium
"Do they have a code clearance?"
"It's an older code sir, but it checks out. I was about to clear them."


On Tue, Sep 10, 2019 at 8:14 AM King, Ronald A. <raking () nsu edu> wrote:

> As an FYI, I have had three reports of fake Direct Deposit requests. Two
> of them included completed forms. The forms included the victims correct
> address and social. Both would have redirected full paychecks to American
> Express National Bank in Salt Lake City. Attached is an image of the
> electronic check. Given the size of the Equifax breach and the loss of the
> pertinent info, we cannot be the only institution seeing this.
>
>
>
> Ron
>
>
>
> *Ronald King*
>
> *Chief Information Security Officer*
>
>
>
> *Office of Information Technology*
>
> (757) 823-2916 (Office)
>
> raking () nsu edu
>
> www.nsu.edu
>
> @NSUCISO (Twitter)
>
> [image: NSU_logo_horiz_tag_4c - Smaller]
>
>
>
> **********
> Replies to EDUCAUSE Community Group emails are sent to the entire
> community list. If you want to reply only to the person who sent the
> message, copy and paste their email address and forward the email reply.
> Additional participation and subscription information can be found at
> https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community