Security information

2019/10/22At around 08:30, there was a report that phishing emails pretending to be University WebActive! Mail were distributed to multiple university email addresses.

When you access the link in the email text, you will see a site that looks just like the University's Web mail system.

If you enter your username and password on this site, your authentication information will be exploited and unauthorized access may occur.

If you receive this email, please delete it without accessing the link.

If you have accidentally entered your user name or password, please change your password and contact the Information System Division.

• Title

• Text example

• Phishing site screen

On September 29, 2018, there was a report that spam was being received from your own email address.

The subject is “~ (email address) hacked! Please change your password immediately!”, But there may be other cases.

This is a threatening scam email. If you receive such an email, please discard it.

subject

~ Email address ~ It is hacked! Change your password immediately!

Subject of similar email

• Emergency response!
• AV alert
• Please read immediately
• Your secret life
• Security warning
• That is your safety issue.
• The problem of your peace of mind.

Text example

About 2019/9/25 11:22 There was a report that phishing emails fake the University's WebActive! Mail were distributed to multiple email addresses of the University.

When you access the link in the email text, you will see a site that looks just like the University's Web mail system.

If you enter your username and password on this site, your authentication information will be exploited and unauthorized access may occur.

If you receive this email, please delete it without accessing the link.

If you have accidentally entered your user name or password, please change your password and contact the Information Systems Division.

• subject：Recover rejected messages
• Text：

As of 9/25/2019 08:22:00 AM, Shibaura Institute of Technology Email System was unable to deliver 4 new messages to your ～@～.shibaura-it.ac.jp inbox

To recover rejected emails, please visit the link below and log in

Recover_mails <- Link to phishing site

Shibaura Institute of Technology Medi= a Center,
2019 Information Media Center, Shibaura Institute of Technology.

• Phishing site screen

Please be careful about dissemination of ransomware by e-mail disguised as DHL.

Subject example

• Problems with package delivery

Text example

Attached file example

• 税関書類.zip

The content of the attached file is Malware (Sodinokibi ransomware).

Please note that if you accidentally open it, the hard disk files will be encrypted and you will be asked for a ransom.

Currently, when spam emails are detected and quarantined in the email security system, quarantine notification emails are sent once a week (Monday at 0 o'clock). Because it has occurred, the notification interval will be changed every day (15:00).

The spam quarantine enable / disable setting can be changed from AMI Settings Change-> Spam Protection.

• Target audience: faculty and staff
• Change date: 2019/1/1