<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal" align="center" style="text-align:center"><b><span style="font-family:"Arial","sans-serif"">TLP: GREEN</span></b><span style="font-family:"Arial","sans-serif""><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial","sans-serif""> <o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-family:"Arial","sans-serif"">TO: CoIT Members & Cybersecurity Group</span></b><span style="font-family:"Arial","sans-serif""><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial","sans-serif""> <o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-family:"Arial","sans-serif"">DATE: June 5, 2017</span></b><span style="font-family:"Arial","sans-serif""><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial","sans-serif""> <o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-family:"Arial","sans-serif"">SUBJECT: Intel Advisory - Business Email Compromise Scams Potentially Result In Data Breaches and Financial Losses<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-family:"Arial","sans-serif""> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial","sans-serif"">The attached Intel Advisory discusses the prevalence of state, local, tribal, and territorial (SLTT) government targeting by Business Email Compromise (BEC) scams that attempt to deceive the
SLTT governments into sending money or personally identifiable information (PII), or that use the government’s name to fraudulently obtain material goods. Successful attacks are highly likely to result in financial fraud or identity theft, and it is possible
they will result in compromises or data breaches. Multi-State Information Sharing and Analysis Center (MS-ISAC) data indicates that BEC scams resulting in data breaches disproportionately affect educational entities and local governments, increasing the importance
of local government awareness about BEC scams.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial","sans-serif"">We hope you find this advisory helpful. If you have questions, please let me know.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-family:"Arial","sans-serif";color:#17365D">Chris Kosciuk<o:p></o:p></span></b></p>
<p class="MsoNormal"><b><span style="font-family:"Arial","sans-serif";color:#17365D">OSRHE & OneNet Security Analyst</span></b><span style="color:#1F497D"><br>
</span><span style="font-family:"Arial","sans-serif";color:#1F497D">405 225.9440 office</span><b><span style="font-family:"Arial","sans-serif";color:#17365D"><o:p></o:p></span></b></p>
<p class="MsoNormal"><u><span style="font-family:"Arial","sans-serif";color:#1F497D"><a href="mailto:ckosciuk@osrhe.edu">ckosciuk@osrhe.edu</a><o:p></o:p></span></u></p>
<p class="MsoNormal"><u><span style="font-family:"Arial","sans-serif";color:#1F497D"><a href="mailto:ckosciuk@onenet.net">ckosciuk@onenet.net</a><o:p></o:p></span></u></p>
<p class="MsoNormal"><u><span style="color:#1F497D"><o:p><span style="text-decoration:none"> </span></o:p></span></u></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" align="center" style="text-align:center"><b><span style="font-family:"Arial","sans-serif"">TLP: GREEN</span></b><span style="font-family:"Arial","sans-serif""><o:p></o:p></span></p>
<p class="MsoNormal" align="center" style="text-align:center"><b><span style="font-family:"Arial","sans-serif"">Limited disclosure, restricted to the community. Recipients may share TLP: GREEN information with peers and partner organizations within their sector
or community, but not via publicly accessible channels. TLP: GREEN information may not be released outside of the community.<o:p></o:p></span></b></p>
<p class="MsoNormal" align="center" style="text-align:center"><b><span style="font-family:"Arial","sans-serif""><a href="http://www.us-cert.gov/tlp/">http://www.us-cert.gov/tlp/</a></span></b><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>