Security information

2020/04/15 From around 12:06, there were reports that phishing e-mails, which seem to be web mails, were distributed to multiple e-mail addresses of our university.

If you enter your user name and password on this site, your authentication information may be exploited, which may lead to unauthorized access.

If you receive this email, please delete it without accessing the link.

If you accidentally enter your user name and password, please change your password and contact the Information Systems Division.

• Title

• Text example

From around 2020/02/11 12:08, there were reports that phishing emails spoofing the University's WebActive! Mail were being scattered to multiple university email addresses.

When you access the link in the body of the e-mail, a site similar to the university's Web mail system will be displayed.

If you enter your username and password on this site, your credentials will be exploited and unauthorized access may be possible.

If you receive this email, please delete it without accessing the link.

If you accidentally enter your user name and password, change the password and contact the Information System Section.

• Subject

• Example text

• Phishing site screen

Around 8:30 2020/02/08 and around 12:31 2020/02/11 there have been reports that suspicious e-mails with emoticons in the subject and body have been scattered to multiple e-mail addresses of the University. did.

When the attached file is opened, it is infected with ransomware (NEMTY), the data is encrypted and a ransom is required.

If you receive this email, please delete the attachment without opening it.

If you accidentally get infected and your data is encrypted, please contact the Information Systems Section.

• Subject example
  :)
  ;)
  :-)
  ;-)
  :-D
  :D
  8-)
  8-D
  :*
  :-*

• Attachment file name
  PIC_Numbers_2020.zip
  IMGNumbers_jpg.zip

• Message displayed when infected with NEMTY ransomware

Report that phishing e-mails spoofing the University's WebActive! Mail are distributed to multiple e-mail addresses of the University around 2020/01/30 23:47 and 01/31 01: 20-02: 28 had.

When you access the link in the body of the e-mail, a site similar to the university's Web mail system will be displayed.

If you enter your username and password on this site, your credentials will be exploited and unauthorized access may be possible.

If you receive this email, please delete it without accessing the link.

If you accidentally enter your user name and password, change the password and contact the Information System Section.

• Subject

• Example text

• フィッシングサイトの画像

Since the end of August 2019, Emotet Malware has been in fashion in Japan. Emotet is malware that is often infected by opening Word files attached to e-mails.

If you get infected with Emotet, you will not only steal Outlook email information (email server authentication information, inbox email address, subject, etc.) but also to other malware (TrickBot, Ryuk ransomware, Ursnif banking malware, etc.) Additional infection may occur.

The stolen email information may be used to disseminate emails for spreading infection.

• Emotet and TrickBot information (Sophos)

Please note that the subject line of emails varies and some of them take the form of replies to stolen emails.

If you receive such an email, please do not open it and contact the Information Systems Division.

If you open it and activate the content, disconnect from the network immediately.

Please make sure that the anti-virus software on your device is operating correctly.

• Attached file example

件名の例