Security information

Since the end of August 2019, Emotet Malware has been in fashion in Japan. Emotet is malware that is often infected by opening Word files attached to e-mails.

If you get infected with Emotet, you will not only steal Outlook email information (email server authentication information, inbox email address, subject, etc.) but also to other malware (TrickBot, Ryuk ransomware, Ursnif banking malware, etc.) Additional infection may occur.

The stolen email information may be used to disseminate emails for spreading infection.

• Emotet and TrickBot information (Sophos)

Please note that the subject line of emails varies and some of them take the form of replies to stolen emails.

If you receive such an email, please do not open it and contact the Information Systems Division.

If you open it and activate the content, disconnect from the network immediately.

Please make sure that the anti-virus software on your device is operating correctly.

• Attached file example

件名の例

Around 2020/01/10 19: 40-19: 53, there were reports that phishing emails spoofing the University's WebActive! Mail were being distributed to multiple email addresses of the University.

When you access the link in the body of the e-mail, a site similar to the university's Web mail system will be displayed.

If you enter your username and password on this site, your credentials will be exploited and unauthorized access may be possible.

If you receive this email, please delete it without accessing the link.

If you accidentally enter your user name and password, change the password and contact the Information System Section.

• Subject

• Text

• Phishing site image

From around 2020/01/09 15:32 to 15:55, there were reports that phishing emails spoofing the University's WebActive! Mail were being distributed to multiple email addresses of the University.

When you access the link in the body of the e-mail, a site similar to the university's Web mail system will be displayed.

If you enter your username and password on this site, your credentials will be exploited and unauthorized access may be possible.

If you receive this email, please delete it without accessing the link.

If you accidentally enter your user name and password, change the password and contact the Information System Section.

• Subject

• Example text

• Phishing site screen

At around 14:41 and 17:18 2020/01/06 and around 17:18 and around 06:50 to 07:45 2020/01/07, phishing emails spoofing the University's WebActive! Mail are distributed to multiple email addresses of the University There was a report that he had been.

When you access the link in the body of the e-mail, a site similar to the university's Web mail system will be displayed.

If you enter your username and password on this site, your credentials will be exploited and unauthorized access may be possible.

If you receive this email, please delete it without accessing the link.

If you accidentally enter your user name or password, change the password and contact the Information System Section.

• Subject

• Example text

• Phishing site screen

There are only a few places left in 2019. Suspicious emails (including SMS) have increased since the second half of 2019.

According to information from the Tokyo Metropolitan Police Department, illegal remittance damage related to Internet banking, which seems to be phishing, has increased rapidly since September 2019.

• Sudden increase in fraudulent remittance damage related to internet banking, which seems to be caused by phishing (attention in cooperation with JBA)
  https://www.npa.go.jp/cyber/policy/caution1910.html

The period of the year-end and New Year holidays is also a period when security response is weak, and attacks targeting that period usually tend to increase. We have compiled a list of matters that you should be aware of regarding security, so students, faculty and staff should read the following materials and be careful not to be damaged.

• セキュリティ警戒情報 - 不審メール編 (PDF 3,164KB)(Accessible only from campus)

In case of damage, please contact the Information System Division by email.

contact information :goiken <at> sic.shibaura-it.ac.jp