Email Security

Email security is a priority for all businesses including Seton Catholic. It is important that we take steps to ensure we pay attention the messages being to us and take appropriate actions. Research has shown that nine out of every ten viruses that infect a computer reach it through an email attachment or phishing email. Here are a couple of Steps you can follow to prevent Phishing scams and lower your chances for infection.

1.) Spam is not only a nuisance; it can also pose security risks. To reduce the amount of spam you receive be cautious where you post your e-mail address. Avoid publishing your e-mail address on Web sites or submitting it to every site or organization that requests it, do this only as necessary.

2.) Pay Close attention to the email messages you are receiving. If you didn't ask for it, be wary of it's intentions. Phishing scams are designed to steal consumers' personal information. They often use doctored and fraudulent e-mail messages to trick recipients into divulging private information, such as credit card numbers, account usernames, passwords, and even social security numbers. At the bottom of this page there are number of examples on how to spot fraudulent email messages.

3.) Keep an eye on email attachments. E-mail attachments consume inordinate amounts of e-mail server space and network bandwidth and are often the culprits behind virus outbreaks—but they're often the easiest way to transfer files. Just be sure to follow these guidelines when e-mailing attachments:

• • Don't attach large files to an e-mail; anything over 20 megabytes shouldn't be sent via e-mail.

  • Limit the use of Office files as attachments, convert them to PDF.

  • Limit the number of files you attach to a message to five or fewer.

  • Save attachments to your hard drive and then delete the e-mail message containing the attachment.

• Don't open unexpected attachments or those sent by unknown parties.

  • Always scan files with an antivirus program after downloading an attachment. Never click an attachment without first confirming that it's virus-free.

4.) Create a strong password. Most of us have been taught to use random numbers and letters for passwords. In reality, this isn’t the best way to generate a password. Today, when a hacker wants to guess a password, they usually use a tool that guesses every possible sequence of numbers, letters, and symbols in order. Sure, a password like “45%aB!” might seem hard for a human to guess, but a computer program could easily crack it.

In order to make a truly secure password, you need to make it long. Every additional character exponentially increases the amount of time it will take to crack a password. That means a 32-character string like “SetonCatholicHighSchoolRox!” is basically unbreakable. And it’s easy to remember, too!

5.) Use multi-factor identification. Why stop at one password when you can have two? Multi-factor identification requires two or more pieces of information to access your account. For example, Google’s 2-step verification sends a pin number to your cell phone when you want to sign in. You’ll need to provide that number and your password to gain access to your account. Even if someone manages to steal your password, they won’t be able to get in without your cell phone. Combined with other email security best practices, this makes your email account almost unbreakable.

Cleverly Disguised Phishing Emails

Date: Jan 19, 2017 6:10 PM

Subject: Important Notice: Authentication Required

To: 

Cc: 

ACH Transfer Scam

From:payments@nacha.org

Date: 

Subject: Your ACH transfer

The ACH transfer (ID: 071439707981), recently sent from your checking account (by you or any other person), was canceled by the Electronic Payments Association.

Canceled transfer

Transaction ID:         071439707981

Rejection Reason        See details in the report below

Transaction Report      report_071439707981.doc

About NACHA

Utilized by all types of financial institutions, the ACH Network is governed by the NACHA Operating Rules, a set of fair and equitable rules that guide risk management and create certainty for all participants. As a not-for-profit association, NACHA represents nearly 11,000 financial institutions via 17 regional payments associations and direct membership. Through its industry councils and forums, NACHA brings together payments system stakeholders to enable innovation that strengthens the industry with creative payment solutions.

NACHA manages the development, administration, and governance of the ACH Network, the backbone for the electronic movement of money and data. The ACH Network serves as a safe, secure, reliable network for direct consumer, business, and government payments, and annually facilitates billions of payments such as Direct Deposit and Direct Payment.

13450 Sunrise Valley Drive, Suite 100

Herndon, VA 20171

Amazon Order Item Processed Today

Be aware of an Amazon Phishing message making the rounds.  The link looks like an order confirmation, but all the links (circled in red) lead to a fake Amazon page with Malware.

Amazon Order Scam

Hello,

Shipping Confirmation

Order # 155-7138139-2493190

Your estimated delivery date is:

Tuesday, December 13, 2011

Track your package Thank you for shopping with us. We thought you'd like to know that we shipped this portion of your order separately to give you quicker service. You won't be charged any extra shipping fees, and the remainder of your order will follow as soon as those items become available. If you need to return an item from this shipment or manage other orders, please visit Your Orders on Amazon.com.

Shipment Details

Omron MOR-031P Fat Loss Monitor, Black $119.95

Item Subtotal: $119.95

Shipping & Handling: $0.00

Total Before Tax: $119.95

Shipment Total: $119.95

Paid by Visa: $119.95

You have only been charged for the items sent in this shipment. Per our policy, you only pay for items when we ship them to you.

Returns are easy. Visit our .

If you need further assistance with your order, please visit Customer Service.

We hope to see you again soon!

Amazon.com

American Express Warning Scam

AT&T - Your AT&T Wireless Bill is Ready to View

Dear Customer,

Your monthly wireless bill for your account is now available online. 

Total Balance Due: $1521.15

Log in to myAT&T to view your bill and make a payment. Or register now to manage your account online. By dialing *PAY (*729) from your wireless phone, you can check your balance or make a payment - it's free. 

Smartphone users: download the free app to manage your account anywhere, anytime. 

Thank you,

AT&T Online Services 

att.com

Attention: University E-Mail User,

Date: Monday, August 18, 2014 at 7:46 AM

Subject: RE: Attention: University E-mail User,

From: Aalaei-Andabili,Seyed Hossein

Sent: Saturday, August 16, 2014 11:27 AM

To: info@admin.net

Subject: Attention: University E-mail User,

Attention: University E-mail User,

You have exceeded your University E-mail account limit quota of 250MB and you are requested to expand it within 48 hours or else your University E-mail account will be disable from our database. Simply CLICK HERE with the complete information requested to expand your University E-mail account quota to 1GB.

Thank you for using University campus E-mail services.

Copyright ©2014 University Information Center.

NOTE: This communication may contain information that is legally protected from unauthorized disclosure. If you are not the intended recipient, please note that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this message in error, you should notify the sender immediately by telephone or by return email and delete this message from your computer.

Suspicious Activity on your Bank of America Account

To:Dear Valued Customer 

Our utmost concern is the security of our online banking users. In this effect, we do proper verification on all transactions done on our secured online banking servers.

Suspicious online activity on your account were detected on our secured servers and as a matter of our improved online banking security measures, We have decided to temporarily limit your online banking access.

You will not be able to use your online account unless you re-activate your online activity but in order to do so,you will have to confirm your details and complete the verification process set out for you before we can retrieve your online access.

      Verification process : 

                           1- Download the attached document and open it in a browser window.

                           2- Once opened, you will be asked to follow a set of instructions.

Sincerely,

Member Services.             

Important Note: We are indeed sorry for any inconveniencies this might have caused you, but also remember that as a Bank of America customer, your security remains our greatest priority.

(Attachment Page that is a Hoax:)

Better Business Bureau Complaint

Coca Cola Award Scam

This particular scam comes from a UK address, usually from rediffmail.com

It includes an attachment telling you that you have won the Coca Cola lottery.  It requests that you send personal and sensitive information over email to the award manager.  You can tell by the spelling, grammar, and by the seemingly random assortment of different font types (fields that were edited recently to include the date), that this is indeed a fake.  The email also requests that you don't tell anyone otherwise you risk being disqualified...pretty obvious.

Corporate eFax Message

This is an eFax message and contains links to sites infected with and spreading malware:

FW: IT SERVICE ALERT

Sent: Wednesday, September 24, 2014 3:39 AM

Subject: FW: IT SERVICE ALERT

Attachment: IT SERVICE UPGRADE NOTICE.pdf

In the attached PDF:

 Dear User;

You may finally lose your mailbox if you do not update today after several notices has been sent. The update process ends today; 24th of September; we are migrating to new email interface to avoid the problem of excessive spam on our mail server. So we are currently doing upgrade on our server. Please, visit the account ownership verification page below to verify your account details and avoid losing your inbox.

<link redacted>

 Thank you, Your Technical Team IT Admin

ITS ALERTS!!!

From: Debra Gowing [mailto:gowingd@newmanu.edu]

Sent: Monday, January 20, 2014 3:58 PM

Subject: ITS ALERTS!!!

 Dear Account User,

  Your e-mail ID needs to be updated with our F-Secure R-HTK4S new version anti-spam/anti-virus/anti-spyware 2014.

The School Webmail Team will update your account. We are sorry for any inconvenience caused.  Click on the link below;

<link>

  Thank you for your cooperation!

Regards,

WEB-MAIL ADMINISTRATOR

C2012-2014

Notification in My Verizon Scam message

This message is designed to compromise your MyVerizon credentials, please see screenshot below for comparison:

Mail Box is Over Quota Email Scam

To: 

Subject: You are about to exhaust your usage allowance

An important message about your Webmail Internet Service

Dear Valued Customer,

Our records show that you have almost exhausted your usage allowance provided with your webmail service.

Depending on your current storage space you may request for additional storage.

Please click here <http:// secureuwebpgrade.com/secured/index.htm>  to request for additional storage.

Keeping track of your usage

What we do:

************ Inform you with online notifications when you're approaching 75% and 100% of your designated usage allowance

************ Notify you with an email when you've reached 100% of your usage allowance

************ Provide you with 24/7 customer care and support, plus answers to any of your questions What you can do:

Mystery Shopper Scam

Mystery Shopping Services

Mystery shoppers visit or call businesses posing as ordinary customers and provide detailed evaluations of their experience using written reports or questionnaires. Mystery shopping is used in a wide variety of industries such as retail, restaurants, financial institutions, convenience stores and gas stations, service providers, manufacturers, department stores, travel and entertainment,

etc.

JOB DESCRIPTION:

1. You will receive funds for the task.

2. You will receive instructions for the task you via email in the

location and details of the task.

3. You must complete the task as quickly as possible and quietly.

4. You will be asked to visit the business location for doing good business

restaurants, shopping stores, etc.

Fill in your complete data to the Information center:

First Name :

Middle Name :

Last Name :

Tel Phone :

Cell Phone :

Address :

City :

State :

Country :

Zip Code :

Alternative Email Address:

Present Age :

Current Occupation :

It's fun and rewarding. There is no fee to become a shopper and you do

not need

previous experience and you'll be given $ 250 for your job,

Regards,

Official Shopper ®

New Secure Message

Payment Advice

This is a phishing campaign combined with a malware dropper. The link in the email would direct to a file download of "message.zip", which contains malware, and could be harmful if opened.

From: HSBC Advising Service [mailto:no-replay@support-hsbc.com] 

Sent: Wednesday, January 14, 2015 9:29 AM

Subject: Payment Advice - Advice Ref:[GB937488] / CHAPS credits

Sir/Madam,

Please download document from dropbox, payment advice is issued at the request of our customer. The advice is for your reference only.

Download link:

<link removed>

Yours faithfully,

Global Payments and Cash Management

HSBC

***************************************************************************

This is an auto-generated email, please DO NOT REPLY. Any replies to this email will be disregarded.

***************************************************************************

Security tips

1. Install virus detection software and personal firewall on your computer. This software needs to be updated regularly to ensure you have the latest protection.

2. To prevent viruses or other unwanted problems, do not open attachments from unknown or non-trustworthy sources.

3. If you discover any unusual activity, please contact the remitter of this payment as soon as possible.

*******************************************************************

This e-mail is confidential. It may also be legally privileged. If you are not the addressee you may not copy, forward, disclose or use any part of it. If you have received this message in error, please delete it and all copies from your system and notify the sender immediately by return e-mail.

Internet communications cannot be guaranteed to be timely, secure, error or virus-free. The sender does not accept liability for any errors or omissions.

*******************************************************************

"SAVE PAPER - THINK BEFORE YOU PRINT!"

Payflow Gateway Alert

PAYFLOW MERCHANT ALERT

Your online account password has expired. You need to update it now, or you will lose access to it.

Please use your personal page attached to this email to continue. Thank you.

Payment Committee Monertary Unit Urgent Respond

From: victo kwade2222

Sent: Thursday, September 11, 2014 9:11 AM

Subject: Payment Committee Monertary Unit Urgent Respond

ATTN:

RE: FINAL RECONCILIATION/SETTLEMENT OF PART PAYMENT TOTALING $75.000

To,

Dear.Beneficiary

Following an excellent business report on total dedication to duty,we wish to inform you that we just received payment instructions from WEST AFRICA MONETARY UNIT to offset a part payment of your funds through western union money transfer easy and reliable way to receive money.

However, arrangement is on top gear regarding the liquidation of your debts. To proceed with the western union release do reconfirm to this office with immediate effect, the preferable method of payment MTCN

We solicit your co-operation to reconfirm your detail coordinates indicating your name as the beneficiary,You must provide more than 3 or 4 names to enable us carry out this procedure immediately without delay.a copy of your international passport for proper identification.

Finally, the moment we receive the required information, we shall proceed immediately as regards final vetting,scrutiny as we assure you for immediate payment.

Best regards,

Mr. Victor Kwade

western union money transfer

Nkrumah High way by pass

Lome-Togo-Ghana

RE: ITS ALERTS

From: Mickey Speakmon

Sent: Sunday, January 10, 2016 4:00 PM

Subject: RE: ITS ALERTS

IT Administrator has currently upgraded all mailboxes (size to 15.0GB). 

Please upgrade your account by clicking on following link: 

Faculty & Staff Email Upgrade

RE: ITS-Department Authenticated Notification#

From: Hollinger, Elizabeth

Sent: jueves, 26 de junio de 2014 6:19 a.m.

To: Hollinger, Elizabeth

Subject: RE: ITS-Department Authenticated Notification#

Dear user,

The following evaluations have been assigned to you. Please login to complete these evaluations.

CLICK HERE TO LOGIN USING SECURE ENCRYPTION

NOTE: Your login will time out after 60 minutes. Your responses will be lost if you do not click on the "FINISH" button before 60 minutes lapses. There is no prompt when your 60 minute session has expired. Please save extensive comments periodically and check your time.

ITS.account evaluations

Connected to Microsoft Exchange

© 2014 Microsoft Corporation. All rights reserved.

Disclaimer: This electronic message may contain information that is Proprietary, Confidential, or legally privileged or protected. It is intended only for the use of the individual(s) and entity named in the message. If you are not an intended recipient of this message, please notify the sender immediately and delete the material from your computer. Do not deliver, distribute or copy this message and do not disclose its contents or take any action in reliance on the information it contains.

Security Change To Your Online Banking Profile

Sprint bill is now available online

System Administrator

From: EMAIL ACCOUNT UPDATE

Sent: Friday, June 06, 2014 5:10 AM

Subject: System Administrator

Attn:

Your E-mail was Login from a different device, your account will be disabled as a result of multiple login if you do not validate your Mailbox by filling out your correct details in the verification form

below:

FIRST NAME .....................

LAST NAME .....................

FULL EMAIL ADDRESS .................

USERNAME .....................

PASSWORD .......................

CONFIRM PASSWORD ..................

Support Webmaster

Copyright (C) 2014 System Administrator.

Ticket Number: FL 654/29/75

From: PUBLISHERS CLEARING HOUSE

Sent: Friday, September 12, 2014 12:21 PM

Subject: Ticket Number: FL 654/29/75

--

View Attachment For Claims

In the attachment:

PUBLISHERS CLEARING HOUSE (PCHlotto-2014 Gift)

THE PCH OFFICIAL PRIZE NOTIFICATION:

We are happy to inform you of the result of the just concluded annual final draws held on the 1st  Junly 2014 by Publishers Clearing House Promotion, your email was among the 4 Lucky winners who won $1,000,000.00 USD  each on THE PCH PROMOTION. Email:  

<email address redacted>

However the results were released on the 1st Semtember, 2014 and your email was attached to Winning Numbers:7-1-4-8-7-3 and Email Ticket Number: FL 654/29/75 The online draws was conducted by a random selection of email addresses from an exclusive list of 4,000 E-mail addresses of individuals and corporate bodies picked by an advanced automated random computer search from the internet.

However, no tickets were sold but all email addresses were assigned to different ticket numbers for representation and privacy. The selection process was carried out through random selection in our computerized email selection machine (TOPAZ) from a database of over 10 email addresses drawn from all the continents of the world.

You are advice to complete the form and send it immediately to our Promotion manager through email for prompt collection of your fund from the designated.

1, Names In Full:...............................

2, Country Of Residence:.................

3, Nationality:..................................

4, Residential Address:....................

5, Date Of Birth/Age:........................

6, Marital Status/Sex:.......................

7, Telephone /Fax No:........................

8, Mobile No:.....................................

9, Occupation:...................................

10,Company Name:...........................

11,Winning Email Address.................

WISHING YOU A HAPPY DAY !!!

(CONTACT PROMOTION MANAGER)

Mr. Dave Sayer

Online Award Director.

Email:  <email address redacted>

Claims Manager.

Unclaimed Fund (Second Notification)

From: David Sunders

Sent: Wednesday, August 20, 2014 2:31 PM

Subject: Unclaimed fund (Second Notification)

Good Morning,

We are Genealogical Heir Hunters in London. Currently there over 11,000 unclaimed estates of people who have died without making a will in England and Wales alone and who left fortunes.

You may have been contacted by a number of Researchers before now which you probably ignored. A list of abandoned estates is usually released by the Treasury, and these are checked by various Researchers in England and Wales and it is never certain as to which Researchers are looking at which cases. This could be the reason for the numerous notifications you receive. At present no entitled blood relatives have come forward to make a claim or have been traced so the money will pass to the state if no claim is made by end of this year.

There is unclaimed inheritance due to the death of the depositor many years ago with her family. I have been consulted by the bank to find any of her family or distant relatives to apply for the estate otherwise the fund will be returned to the government as unclaimed estate. Under the Intestate law of England and Wales, the deceased’s spouse, or civil partner, children of the deceased (if they haven’t been adopted out of the family), adopted children (into the family), if these are not available or relevant then Uncles, Aunts or their children would be entitled in priority order.

All attempt to locate more of her immediate relatives has been unsuccessful, you are required to take up the beneficiary status and submit application for release of the estate to you because we believe that there is a possibility that you are an heir to an estate we are working on since you are the closest we could locate based on our genealogical research.

We understand our letter may come as a surprise and sometimes sound as if the information we give you is too good to be true. The claim is the first stage which retrieves the estate from the Treasury, then followed by the Probate approval/clearance. I will be glad to give further clarification and directives upon your response.

Thanks,

David Sunders

DS Researchers

UPDATE YOUR ACCOUNT NOW

Attention User;

Your email Quota is almost exceeded. Starting from August 13th, we are migrating to new email interface. So we are currently doing a maintenance on our server. Please, click the link below to Enter and update your account and avoid losing your inbox.

<link>

Thank you,

Technical Team

Verizon Wireless Account Information Scam

[IMPORTANT ACCOUNT INFORMATION FROM VERIZON WIRELESS.]

Your current bill for your account is now available online in My Verizon

Total Balance Due: $911.24

Keep in mind that payments and/or adjustments made to your account after your bill was generated will not be reflected in the amount shown above.

View and Pay Your Bill

Want to simplify payments?

Enroll in Auto Pay

Thank you for choosing Verizon Wireless.

My Verizon is also available 24/7 to assist you with:

*  Viewing your usage

*  Updating your plan

*  Adding Account Members

*  Paying your bill

*  Finding accessories for your devices

*  And much, much more...

Webmail Messaging Cente

From: Webmail Messaging Cente

To: Recipients

Subject:Dear Webmail Account Owner,

Dear Webmail Account Owner, 

This is our second message to you from the University Webmail Messaging Center to all email account owners.

We are currently carrying out scheduled maintenance,upgrade of our web mail service and we are changing our mail host server,as a result your original password will be reset.

We are sorry for any inconvenience caused. 

To complete your webmail email account upgrade, you must reply to this email immediately and provide the information requested below.

*********************************************************************************

CONFIRM YOUR EMAIL IDENTITY NOW 

E-mail Address: 

User Name/ID: 

Password: 

Re-type Password:

************************************************************************************

Failure to do this will immediately render your email address deactivated from the University Webmail.

************************************************************************************

This E-mail is confidential and privileged. If you are not the intended Recipient please accept our apologies; Please do not Disclose, Copy or Distribute Information in this E-mail or take any action in Reliance on its contents: to do so is strictly prohibited

 and may be Unlawful. 

Please inform us that this Message has gone astray before deleting it. 

Thank you for your Co-operation. 

Copyright ©2011 University Webmaster. All Rights Reserved 

Wells Fargo Online Security Notification

From: Wells Fargo Online

Sent: Wednesday, June 27, 2012 4:14 PM

To: Recipients

Subject: Your Wells Fargo Online Account Security Notification©

Dear Wells Fargo Online Customer,

We are sorry, We have noticed an error activity on your wellsfargo online banking services. We advice you to verify your Wellsfargo account(s) now using the Wellsfargo Account Verification Page. To verify your Account Please Download Attachment and open in a browser to Continue. We value your privacy and your preferences. Failure to abide by these instructions may subject you to wellsfargo online restrictions or inactivity.

[Investment Products: Not FDIC Insured - No Bank Guarantee - May   Lose   Value]

© 2012 Wells Fargo All rights reserved.

Your Biweekly Payroll is Due 

From: Run Do Not Reply

Sent: Tuesday, October 09, 2012 8:15 AM

To: *

Subject: Your Biweekly payroll is due

Importance: High

Your Biweekly payroll for check date October 09, 2012 is ready for approve. Your payroll will be processed at least 3 days before to your check date to ensure timely tax deposits and delivery. If you request direct deposit to your employees, this must also guarantee pay down their money by the target date. 

Client ID: XXXXXXX4 

Other details: Click thist Link for Details 

Important: Please be advised that calls to and from your payroll service team may be monitored or recorded. 

?

Please do not reply to this message. auto informer system cannot accept incoming mail.

Your Abandon Consignment 

your apple account suspended

Your mailbox is almost full

Subject: Your mailbox is almost full.

Your mailbox is almost full.

465MB           500MB

Current size            Maximum size

Please increase your mailbox quota size automatically by clicking 

<phishing website> and fill-out the necessary requirements to automatically increase your mailbox quota size.

IMPORTANT NOTE: You won't be able to send and receive mail messages at 480MB .

ITS help desk

ADMIN TEAM

(c)Copyright 2013 Microsoft

RE: Your mailbox is almost full........

From: Hausman, Charles H

Sent: Thursday, September 25, 2014 8:29 AM

To: Hausman, Charles H

Subject: RE: Your mailbox is almost full........

Your mailbox is almost full.

2426MB                       2500MB

Current size Maximum size

Please CLICK HERE to reduce your mailbox size and increase the size to 3500MB.