Monitoring - The IT Security Office has received reports of a phishing attack.

Phishing Attack: "New message from Blackboard."
--------------
The Duke IT Security Office has received multiple reports of the following widespread phishing attack. It is important to note that Duke no longer uses the Blackboard learning management system and emails claiming to be from Blackboard requesting that you login, should be treated as suspicious.

If you have received the message below, please delete without clicking on the link or replying. If you have clicked the link and/or provided your Duke credentials on the linked site, please contact the OIT Service Desk immediately at (919) 684-2200.

Learn more about phishing [1].

https://security.duke.edu/node/299
Jul 19, 11:00 EDT

Monitoring - The IT Security Office has recently received several reports of email fraud attempts where attackers are attempting to impersonate Duke staff.

These attacks usually attempt to impersonate staff members in management positions and follow the same general format:

*1*. The attacker registers an email address with an external email provider
(ex: Gmail) that appears as if it may be a personal email account for the person they're impersonating.

*2*. Utilizing publicly available information to determine targets, the attacker then sends a message to users they suspect may work with the person they're impersonating. These messages are usually simple in nature and ask a question such as "Are you available?" or "May I ask a favor of you?".

*3*. If the user responds to the message, the attacker will respond to begin their fraud.

Any email message from a Duke employee not originating from a duke.edu email address should be treated with suspicion. As always, any suspicious message can be reported to security@duke.edu for evaluation.

https://security.duke.edu/node/298
Jul 19, 09:01 EDT

Monitoring - The vendor, Microsoft, has developed and validated a fix for this issue. The first portion of the fix has begun deployment and they anticipate the remaining portion will be applied by July 16. The expectation is that a full resolution should be implemented by July 20.
Jul 11, 13:08 EDT

Monitoring - The IT Security Office has received reports of a phishing attack with the Subject: 'Tutor'

The intent of this message it to lure users into replying to the email so that they can request further personal information about you with the end goal of financial gain or fraud.

Visit security.duke.edu to view the phishing email. If you have received the message, please delete without replying. If you have replied, please contact the OIT Service Desk at (919) 684-2200.
Jul 16, 10:47 EDT