The Information Security Group has received numerous reports of an email signed by David Swain (dswain@weavemail.com), supposedly representing the “Brown Collaborative Networks”. Please be aware that the sender has no affiliation with Brown, the “Brown Collaborative Networks” is not an official Brown sanctioned nor initiated effort, and represents an illegitimate use of the Brown trademark.
Phishing Alert: Brown Collaborative Networks Email
Phishing Alert: Your Mailbox has exceeded . . .
Apple Order Scam
Several reports of a phishing email have surfaced this morning, supposedly confirming an Apple order. While it is an obvious fake — sent to a long list of names, has grammatical errors, is for an unusually large amount (4,545.54 USD ) and the URL is suspiciously not from Apple — it nonetheless offers the tempting “CLICK HERE” link.
Second Hand Scams
The Information Security Group is alerting the Brown community to numerous inquiries regarding “second hand scams.” According to reports, the scammers are going after legitimate professors/email addresses (whether they are looking for a job or not), who are sent phony job offers supposedly from Brown University. The email may include an attachment that contains the offer and terms of the position, along with contact information.
Flashback Trojan horse a threat to unpatched Macs
While there have been no sightings at Brown yet, Mac users should be alert to the Flashback Trojan variant, which could cause some damage to unsuspecting Mac users.
The security firm Intego, who first reported the Flashback Trojan horse this fall, has spotted a new variant that uses a three-prong attack strategy to infect Macs. According to Indego:
Phishing email links to Google form
New semester brings an upsurge in phishing emails
Suspicious emails with PDF attachments from Brown addresses
The Help Desk has received several reports of suspicious empty emails with PDF attachments sent from Brown addresses.
As with similar emails, DO NOT open the attachment or respond to the email. Instead, report it as phishing (from the original email click on the down arrow (to the right of the REPLY button) and select “Report phishing”).
Phish alert: your pending ACH transaction
Beware of the latest phishing email about delays to your “recent ACH debit transfer.” Some things to look out for:
WARNING: “Account update!” phish sighted
Several users have reports receiving the following email, which contains the standard hallmarks of a phish:
