<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:18.0pt;color:#1F497D'>Students: Please be aware of the phishing scam outlined below. <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:18.0pt;color:#1F497D'><o:p> </o:p></span></p><div><p class=MsoNormal><b><span style='font-size:9.0pt;font-family:"Arial",sans-serif;color:#1F497D'>Jeff Weems<o:p></o:p></span></b></p><p class=MsoNormal><b><span style='font-size:9.0pt;font-family:"Arial",sans-serif;color:#1F497D'>Chief Technical Officer<o:p></o:p></span></b></p><p class=MsoNormal><span style='font-size:8.0pt;font-family:"Arial",sans-serif;color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:8.0pt;font-family:"Arial",sans-serif;color:#404040'>Eastern Oklahoma State College<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:8.0pt;font-family:"Arial",sans-serif;color:#404040'>1301 West Main Street<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:8.0pt;font-family:"Arial",sans-serif;color:#404040'>Wilburton, OK 74578<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:8.0pt;font-family:"Arial",sans-serif;color:#404040'>918.465.1750<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:8.0pt;font-family:"Arial",sans-serif;color:#404040'>jweems@eosc.edu<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:8.0pt;font-family:"Arial",sans-serif;color:#404040'>www.eosc.edu<o:p></o:p></span></p></div><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> CyberSecurity [mailto:cybersecurity-bounces@lists.onenet.net] <b>On Behalf Of </b>OneNet Security<br><b>Sent:</b> Thursday, May 04, 2017 8:29 AM<br><b>To:</b> 'cybersecurity@lists.onenet.net' <cybersecurity@lists.onenet.net><br><b>Subject:</b> [CyberSecurity] Beware Google phishing attacks!!<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='font-family:"Arial",sans-serif;color:red'>PLEASE BE AWARE OF THIS PHISHING CAMPAIGN. <o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Arial",sans-serif'>Here is how it works.<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Arial",sans-serif'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Arial",sans-serif'>The email body states “[name] has invited you to view the following document:” and includes a link to “Open in Docs”. The link opens to a legitimate Google login page.<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Arial",sans-serif'>· Once the recipients enter their credentials or select an account, a permissions box for a fraudulent application hosted at hxxps://googledocs[.]g-docs[.]win requests access to the user’s address book and email.<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Arial",sans-serif'>· Once the victim clicks “Allow” this provides the attacker access to their email account and address book but not their calendar. The attacker can then send phishing emails to other targets from the compromised account.<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Arial",sans-serif'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Arial",sans-serif'>So you see, if you opened and clicked and then clicked Allow, these attacks could ensue under your name and you should change your google password immediately.<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Arial",sans-serif'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Arial",sans-serif'>Thank you all so much for your good reports and staying smart and aware.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Arial",sans-serif'> </span><o:p></o:p></p><p class=MsoNormal><i><span style='font-size:10.0pt;font-family:"Arial",sans-serif;color:blue'>Barbara McCrary</span></i><i><span style='font-size:12.0pt;font-family:"Times New Roman",serif'><br></span></i><span style='font-size:7.5pt;font-family:"Arial",sans-serif'>Chief Information Security Officer<br><i>MCSE, MCSE:Security, +Messaging</i>,<i> CompTia:Security+</i></span><span style='font-size:12.0pt;font-family:"Times New Roman",serif'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman",serif'><a href="mailto:bmccrary@osrhe.edu"><i><span style='font-size:7.5pt;font-family:"Arial",sans-serif'>bmccrary@osrhe.edu</span></i></a></span><o:p></o:p></p><p class=MsoNormal><span style='font-size:8.0pt;font-family:"Arial",sans-serif'> </span><o:p></o:p></p><p class=MsoNormal><span lang=EN style='font-size:7.5pt;font-family:"Arial",sans-serif;color:navy'>Protecting data is a shared responsibility!</span><o:p></o:p></p><p class=MsoNormal><span lang=EN style='font-size:8.0pt;font-family:"Arial",sans-serif'> </span><o:p></o:p></p><p class=MsoNormal><span lang=EN style='font-size:7.5pt;font-family:"Arial",sans-serif;color:navy'>INSTALL antivirus and antispyware software.</span><o:p></o:p></p><p class=MsoNormal><span lang=EN style='font-size:7.5pt;font-family:"Arial",sans-serif;color:navy'>USE strong passwords.</span><o:p></o:p></p><p class=MsoNormal><span lang=EN style='font-size:7.5pt;font-family:"Arial",sans-serif;color:navy'>KNOW who you are dealing with online.</span><o:p></o:p></p><p class=MsoNormal><span lang=EN style='font-size:7.5pt;font-family:"Arial",sans-serif;color:navy'>STORE confidential and sensitive data on encrypted devices only.</span><o:p></o:p></p><p class=MsoNormal><span lang=EN style='font-size:7.5pt;font-family:"Arial",sans-serif;color:navy'>SHUT DOWN home computers or disconnect from the Internet when not in use.</span><o:p></o:p></p><p class=MsoNormal><span lang=EN style='font-size:7.5pt;font-family:"Arial",sans-serif;color:navy'> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:7.5pt;font-family:"Arial",sans-serif'>Oklahoma State Regents for Higher Education<br>655 Research Parkway</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:7.5pt;font-family:"Arial",sans-serif'>Suite 200</span><o:p></o:p></p><p class=MsoNormal><span style='font-size:7.5pt;font-family:"Arial",sans-serif'>Oklahoma City, OK 73104</span><br><span style='font-size:7.5pt;font-family:"Arial",sans-serif'>405 225.9316 office<br>405 234.4321 cell<br>405 234.4588 fax</span> <o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal><span style='font-size:7.5pt;font-family:"Arial",sans-serif'>Note: This communication and attachments, if any, are intended solely for the use of the addressee hereof. In addition, this information and attachments, if any, may contain information that is confidential, privileged and exempt from disclosure under applicable law,</span> <span style='font-size:7.5pt;font-family:"Arial",sans-serif;color:black'>including, but not limited to, the Privacy Act of 1974</span><span style='font-size:7.5pt;font-family:"Arial",sans-serif'>. If you are not the intended recipient of this information, you are prohibited from reading, disclosing, reproducing, distributing, disseminating, or otherwise using this information. If you have received this message in error, please promptly notify the sender and immediately, delete this communication from your system.</span><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>___________________________________________________<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><b><span style='font-size:8.0pt;font-family:"Arial",sans-serif;color:#17365D'>Chris Kosciuk<o:p></o:p></span></b></p><p class=MsoNormal><b><span style='font-size:8.0pt;font-family:"Arial",sans-serif;color:#17365D'>Information Security<o:p></o:p></span></b></p><p class=MsoNormal><span style='font-size:8.0pt;font-family:"Arial",sans-serif;color:#1F497D'>Oklahoma State Regents for Higher Education / OneNet <br>655 Research Parkway</span><span style='font-size:8.0pt'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:8.0pt;font-family:"Arial",sans-serif;color:#1F497D'>Suite 200<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:8.0pt;font-family:"Arial",sans-serif;color:#1F497D'>Oklahoma City, OK 73104</span><span style='font-size:8.0pt;color:#1F497D'><br></span><span style='font-size:8.0pt;font-family:"Arial",sans-serif;color:#1F497D'>405 225.9440 office<o:p></o:p></span></p><p class=MsoNormal><u><span style='font-size:8.0pt;font-family:"Arial",sans-serif'><a href="mailto:ckosciuk@osrhe.edu">ckosciuk@osrhe.edu</a><o:p></o:p></span></u></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>