Posts
Credentials Breach Report
In June 2020, ProctorU, an online examination service, suffered a data breach. Over 444K user records were exposed and posted to an online hacking community. These records contain names, emails,...
August 24, 2020
·
12:21 PM
A Scam Targeting Microsoft SharePoint Users
Malicious actors are using Covid-19 and current economic conditions to exploit victims with new phishing scams. The article linked below talks about two similar phishing scams. One scam claims to...
August 24, 2020
·
12:20 PM
A Common Scam That Still Works
Recently DoIT has been notified that an email scammer has been trying to impersonate other UMBC staffers. The email comes from a scammer who is claiming to be someone from UMBC and has the Subject...
August 24, 2020
·
12:19 PM
Truefire Data Breach
In February 2020, the guitar tuition website TrueFire suffered a data breach. Over 600,000 individuals were affected. Information such as names, emails, addresses, account balances, and passwords...
August 21, 2020
·
12:14 PM
Another Example Of A Gift Card Scam Targeting UMBC accounts
The DoIT has recently been notified of a malicious actor trying to impersonate a UMBC staffer. This scammer is sending emails with the subject line “QUICK REQUEST” and asking victims if they are...
August 20, 2020
·
12:01 AM
An E-mail Exchange With A Scammer
Recently the DoIT has been notified of a malicious actor trying to impersonate a UMBC staffer. The phishing email has the subject line “TASK” and a chain of emails from the scammer can be seen...
August 18, 2020
·
6:00 PM
You Can Be Tricked Into Giving Access To Your Files
During the pandemic, Microsoft has seen a rise in phishing campaigns. One such campaign uses the Office 365 phishing via malicious OAuth apps. The phishing attack attempts to trick individuals...
August 18, 2020
·
5:53 PM
The Latest Attack On Your Computer
According to an article by the Cybersecurity and Infrastructure Security Agency (CISA), there has been a recent phishing email campaign trying to deploy malware onto victims' devices. This malware...
August 17, 2020
·
4:54 PM
Yet Another Job Scam, (Pretending To Be From Corestaff)
Below is another example of a phishing email campaign in which the malicious actor is claiming to be from Corestaff Services. The email below is the initial message sent out to victims to try and...
August 13, 2020
·
5:06 PM
A Persistent Scam
DoIT has been notified of a phishing scam where the malicious actor was trying to impersonate a UMBC staffer. Below is an example of the email with the name, the email address of the sender, and...
August 13, 2020
·
4:44 PM