Security Bulletin of February 19, 2009

Overview
Full Text of One Known Scam
Tips for Safer Computing
Further Assistance

Other Bulletins
Recent CERT Alerts

COMPUTING ALERT: Beware of Scams, Phishing Attempts, and Other Malicious Emails

OVERVIEW

Malicious email messages are an ongoing concern and we are seeing more and more “phishing” emails in recent weeks. Recently, two messages with the subject lines "***** Confirm Account Update *****" and “Your mailbox has exceeded the storage limit” went to many Haverford email accounts. These are not legitimate messages. Do not respond.

If you accidentally responded to these, the Computing Center already reset your email password for you. Should you have trouble accessing your account, please contact the Help Desk. However, should you ever have concerns that others know your password, please change it immediately on our secure web site, https://accounts.haverford.edu/.

GENERAL TIPS:

• Never send passwords or other sensitive information via email. In a phishing attack, somebody pretending to be a trustworthy source tries to trick you into revealing sensitive information such as email passwords or bank account information.  Email is not secure.  It is against Computing Center policy to request your password or other sensitive information via email. In fact, reputable sources should never ask you to send sensitive information by email.
  
  
• Verify email requests. Common phishing attempts come from sources pretending to be IT departments, banks, government agencies and Internet Service providers. If the Haverford Computing Center asks for you to take action, we will reference a page on our secure web site. (How can you tell the site is secure? Notice that the URL begins with HTTPS and that your browser displays an image of a padlock on the URL line or the status bar, indicating the site is verified and encrypted.)
  
  
• If you accidentally reply to an email requesting your Haverford account password, reset your password immediately. Our password changing tool is on our secure web site, https://accounts.haverford.edu/. Note, the Computing Center will reset your password if we learn that you responded to a phishing email. If you have trouble accessing your email account, please call the Help Desk.
  
  
• Don't trust email attachments you aren't expecting. Such attachments may be a virus or other malicious file. 
  
  
• Be alert to unusual computer behavior.  If you notice anything unusual, such as the wrong name appearing in your SquirrelMail account, your computer running unusually slow, or your browser loading the wrong web pages, please contact the Help Desk immediately. These are common symptoms of a compromised computer or email account.
  
  
• Use common sense.  There are many other potential email hazards. Be wary of get-rich-quick and quick-fix emails.  If you have any doubt about a message, check with the sender or with the Computing Center.

For more details, see the excellent document, Recognizing and Avoiding Email Scams, on the United States Computer Emergency Response Team web site (https://www.us-cert.gov/reading_room/).

HELP:
If you have any questions, please contact the Computing Help Desk:
Telephone: 610-896-1480
Email: helpdesk@haverford.edu

FULL TEXT OF ONE KNOWN SCAM

The full text this bogus email message is below.

MORE INFORMATION

Additional information about computer security and current threats can be found at the following sites:

United States Computer Emergency Readiness Team (US-CERT )

<https://www.us-cert.gov/nav/nt01/>

McAfee Avert Threat Center

<https://www.mcafee.com/us/threat_center/default.asp>

Microsoft Security

<https://www.microsoft.com/security/>

Apple Product Security

<https://www.apple.com/support/security/>

ACC EMAIL POLICY:

ACC will never request passwords or other confidential information via email. Email is not secure. We will never email an executable file. Instead, if we ask you to take action, we will always refer you to our web site, using an address that starts with the secure "https" protocol -- that way, you know you are downloading a safe file from us.

VERIFY THIS ALERT IS LEGITIMATE:

Before taking an action recommended in an email, please confirm that the email is legitimate. ACC posts a detailed description of all our alerts on our web site, https://www.haverford.edu/acc/bulletins/.