<?xml version="1.0"?>
<News hasArchived="false" page="24" pageCount="29" pageSize="10" timestamp="Mon, 27 Apr 2026 05:35:07 -0400" url="https://beta.my.umbc.edu/groups/itsecurity/posts.xml?mode=activity&amp;page=24">
<NewsItem contentIssues="false" id="91617" important="false" status="posted" url="https://beta.my.umbc.edu/groups/itsecurity/posts/91617">
<Title>Fake COVID-19 Giftcards</Title>
<Tagline>If an offer seems too good to be true, it probably is...</Tagline>
<Body>
<![CDATA[
    <div class="html-content"><span><span>For several days, there have been reports of fake gift cards supposedly distributed by Starbucks, Lowes, and Walmart as an ‘apology’ for closing their stores due to social distancing requirements.  T</span></span><span>he Starbucks messages include the offer of a $100 gift card.</span><div><span><br></span></div><div><span>If a person clicks on the link in the email message, the person will be taken to a page that will ask for their personal information.  Any information that is submitted will be sent to scammers.  Malware will also often be installed onto the person's computer.  </span></div><div><span><br></span></div><div><span>If an offer seems too good to be true, it usually is.  When something seems suspicious, the best thing to do is to contact the company directly to ask if the offer is valid.  In the case of Starbucks, you can check the Starbucks app, contact the corporate customer service center, or contact a local store.</span></div><div><span><br></span></div><div><span>For more details, see the following websites:  </span></div><div><ul><li><span><a href="https://www.kamloopsthisweek.com/news/beware-pandemic-related-scam-involving-starbucks-email-1.24105164">https://www.kamloopsthisweek.com/news/beware-pandemic-related-scam-involving-starbucks-email-1.24105164</a></span></li><li><span><a href="https://bc.ctvnews.ca/warning-about-fake-starbucks-covid-19-apology-email-with-gift-card-offer-1.4862503">https://bc.ctvnews.ca/warning-about-fake-starbucks-covid-19-apology-email-with-gift-card-offer-1.4862503</a></span></li><li><span><a href="https://www.snopes.com/fact-check/starbucks-coupon-scam/">https://www.snopes.com/fact-check/starbucks-coupon-scam/</a></span></li></ul></div><div><br></div></div>
]]>
</Body>
<Summary>For several days, there have been reports of fake gift cards supposedly distributed by Starbucks, Lowes, and Walmart as an ‘apology’ for closing their stores due to social distancing...</Summary>
<TrackingUrl>https://beta.my.umbc.edu/api/v0/pixel/news/91617/guest@my.umbc.edu/18e95940ddd9459e74d6281278190ea8/api/pixel</TrackingUrl>
<Tag>covid19</Tag>
<Tag>notice</Tag>
<Group token="itsecurity">IT Security - DoIT Cybersecurity Assurance and Digital Trust</Group>
<GroupUrl>https://beta.my.umbc.edu/groups/itsecurity</GroupUrl>
<AvatarUrl>https://assets1-beta.my.umbc.edu/images/avatars/group/7/xsmall.png?1777162216</AvatarUrl>
<AvatarUrl size="original">https://assets4-beta.my.umbc.edu/images/avatars/group/7/original.png?1777162216</AvatarUrl>
<AvatarUrl size="xxlarge">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xxlarge.png?1777162216</AvatarUrl>
<AvatarUrl size="xlarge">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xlarge.png?1777162216</AvatarUrl>
<AvatarUrl size="large">https://assets4-beta.my.umbc.edu/images/avatars/group/7/large.png?1777162216</AvatarUrl>
<AvatarUrl size="medium">https://assets4-beta.my.umbc.edu/images/avatars/group/7/medium.png?1777162216</AvatarUrl>
<AvatarUrl size="small">https://assets1-beta.my.umbc.edu/images/avatars/group/7/small.png?1777162216</AvatarUrl>
<AvatarUrl size="xsmall">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xsmall.png?1777162216</AvatarUrl>
<AvatarUrl size="xxsmall">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xxsmall.png?1777162216</AvatarUrl>
<Sponsor>IT Security - DoIT</Sponsor>
<PawCount>0</PawCount>
<CommentCount>0</CommentCount>
<CommentsAllowed>true</CommentsAllowed>
<PostedAt>Thu, 26 Mar 2020 23:35:39 -0400</PostedAt>
<EditAt>Thu, 26 Mar 2020 23:46:28 -0400</EditAt>
</NewsItem>

<NewsItem contentIssues="false" id="91616" important="false" status="posted" url="https://beta.my.umbc.edu/groups/itsecurity/posts/91616">
<Title>US DOJ Tracking COVID-19 Scams</Title>
<Tagline>The US DOJ has a Coronavirus Fraud Task Force</Tagline>
<Body>
<![CDATA[
    <div class="html-content">The US Department of Justice has created a task force to track scams related to COVID-19.  The following web page lists many of the types of scams they are tracking:  <a href="https://www.justice.gov/usao-wdva/covid-19-fraud" rel="nofollow external" class="bo">COVID-19 Fraud</a>  If you see or are the victim of a scam, please report it to <a href="mailto:security@umbc.edu">security@umbc.edu</a> and the US DOJ or FBI.  Instructions for reporting scams to the DOJ and FBI are listed on the website above. <div><br></div><div>From the DOJ Web Page:</div><div><br></div><div><div><em>The Task Force is working to keep the public safe from fraud and scams. Some examples of COVID-19 scams include:</em></div><div><ul><li><em>Treatment scams:  Scammers are offering to sell fake cures, vaccines, and advice on unproven treatments for COVID-19</em></li><li><em>Supply scams:  Scammers are creating fake shops, websites, social media accounts, and email addresses claiming to sell medical supplies currently in high demand, such as surgical masks. When consumers attempt to purchase supplies through these channels, fraudsters pocket the money and never provide the promised supplies.</em></li><li><em>Provider scams:  Scammers are also contacting people by phone and email, pretending to be doctors and hospitals that have treated a friend or relative for COVID-19, and demanding payment for that treatment.</em></li><li><em>Charity scams:  Scammers are soliciting donations for individuals, groups, and areas affected by COVID-19.  </em></li><li><em>Phishing scams:  Scammers posing as national and global health authorities, including the World Health Organization (WHO) and the Centers for Disease Control and Prevention (CDC), are sending phishing emails designed to trick recipients into downloading malware or providing personal identifying and financial information.</em></li><li><em>App scams:  Scammers are also creating and manipulating mobile apps designed to track the spread of COVID-19 to insert malware that will compromise users’ devices and personal information. </em></li><li><em>Investment scams:  Scammers are offering online promotions on various platforms, including social media, claiming that the products or services of publicly traded companies can prevent, detect, or cure COVID-19, and that the stock of these companies will dramatically increase in value as a result. These promotions are often styled as “research reports,” make predictions of a specific “target price,” and relate to microcap stocks, or low-priced stocks issued by the smallest of companies with limited publicly available information.</em></li></ul></div></div></div>
]]>
</Body>
<Summary>The US Department of Justice has created a task force to track scams related to COVID-19.  The following web page lists many of the types of scams they are tracking:  COVID-19 Fraud  If you see or...</Summary>
<TrackingUrl>https://beta.my.umbc.edu/api/v0/pixel/news/91616/guest@my.umbc.edu/6a7234eaf01f5f771659b10b7a7ddd8c/api/pixel</TrackingUrl>
<Tag>covid19</Tag>
<Tag>notice</Tag>
<Group token="itsecurity">IT Security - DoIT Cybersecurity Assurance and Digital Trust</Group>
<GroupUrl>https://beta.my.umbc.edu/groups/itsecurity</GroupUrl>
<AvatarUrl>https://assets1-beta.my.umbc.edu/images/avatars/group/7/xsmall.png?1777162216</AvatarUrl>
<AvatarUrl size="original">https://assets4-beta.my.umbc.edu/images/avatars/group/7/original.png?1777162216</AvatarUrl>
<AvatarUrl size="xxlarge">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xxlarge.png?1777162216</AvatarUrl>
<AvatarUrl size="xlarge">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xlarge.png?1777162216</AvatarUrl>
<AvatarUrl size="large">https://assets4-beta.my.umbc.edu/images/avatars/group/7/large.png?1777162216</AvatarUrl>
<AvatarUrl size="medium">https://assets4-beta.my.umbc.edu/images/avatars/group/7/medium.png?1777162216</AvatarUrl>
<AvatarUrl size="small">https://assets1-beta.my.umbc.edu/images/avatars/group/7/small.png?1777162216</AvatarUrl>
<AvatarUrl size="xsmall">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xsmall.png?1777162216</AvatarUrl>
<AvatarUrl size="xxsmall">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xxsmall.png?1777162216</AvatarUrl>
<Sponsor>IT Security - DoIT</Sponsor>
<PawCount>0</PawCount>
<CommentCount>0</CommentCount>
<CommentsAllowed>true</CommentsAllowed>
<PostedAt>Thu, 26 Mar 2020 23:19:15 -0400</PostedAt>
<EditAt>Thu, 26 Mar 2020 23:21:10 -0400</EditAt>
</NewsItem>

<NewsItem contentIssues="false" id="91572" important="false" status="posted" url="https://beta.my.umbc.edu/groups/itsecurity/posts/91572">
<Title>COVID-19 Scams Reported to the BBB</Title>
<Body>
<![CDATA[
    <div class="html-content"><span><p><span>The Better Business Bureau has has a website that tracks scams and fraud.  <a href="https://www.bbb.org/scamtracker" rel="nofollow external" class="bo">BBB Scam Tracker</a></span></p><p><br></p><p><span>The Scam Tracker lists information about scams in general, but also has a section about COVID-19 scams.  For the full list, please visit the BBB website.  Example of scams the BBB is tracking include:  </span></p><p><span><br></span></p><ul><li><p><span>Price Gouging:  Ex: Selling $10 health products for $79.99</span></p></li><li><p><span>Fraudulent Products:  Ex: Ineffective face masks </span></p></li><li><p><span>Impersonating Officials:  Ex: Requesting personal information by posing as an employee of “US Health Care”</span></p></li></ul><span><div><span><span><br></span></span></div></span><p><span><span>Don't fall victim to these attempts to take advantage of vulnerable people.  If you do come across a scam, please report it to <a href="mailto:security@umbc.edu">security@umbc.edu</a>.  You can also report it to the BBB through their scam tracker website.  </span></span></p><p><span><span><br></span></span></p><p></p></span></div>
]]>
</Body>
<Summary>The Better Business Bureau has has a website that tracks scams and fraud.  BBB Scam Tracker     The Scam Tracker lists information about scams in general, but also has a section about COVID-19...</Summary>
<Website>https://itsecurity.umbc.edu/covid19</Website>
<TrackingUrl>https://beta.my.umbc.edu/api/v0/pixel/news/91572/guest@my.umbc.edu/38ed8ba177b7f58c4c496c9ddcf18902/api/pixel</TrackingUrl>
<Tag>covid19</Tag>
<Tag>notice</Tag>
<Group token="itsecurity">IT Security - DoIT Cybersecurity Assurance and Digital Trust</Group>
<GroupUrl>https://beta.my.umbc.edu/groups/itsecurity</GroupUrl>
<AvatarUrl>https://assets1-beta.my.umbc.edu/images/avatars/group/7/xsmall.png?1777162216</AvatarUrl>
<AvatarUrl size="original">https://assets4-beta.my.umbc.edu/images/avatars/group/7/original.png?1777162216</AvatarUrl>
<AvatarUrl size="xxlarge">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xxlarge.png?1777162216</AvatarUrl>
<AvatarUrl size="xlarge">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xlarge.png?1777162216</AvatarUrl>
<AvatarUrl size="large">https://assets4-beta.my.umbc.edu/images/avatars/group/7/large.png?1777162216</AvatarUrl>
<AvatarUrl size="medium">https://assets4-beta.my.umbc.edu/images/avatars/group/7/medium.png?1777162216</AvatarUrl>
<AvatarUrl size="small">https://assets1-beta.my.umbc.edu/images/avatars/group/7/small.png?1777162216</AvatarUrl>
<AvatarUrl size="xsmall">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xsmall.png?1777162216</AvatarUrl>
<AvatarUrl size="xxsmall">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xxsmall.png?1777162216</AvatarUrl>
<Sponsor>IT Security - DoIT</Sponsor>
<PawCount>0</PawCount>
<CommentCount>0</CommentCount>
<CommentsAllowed>true</CommentsAllowed>
<PostedAt>Wed, 25 Mar 2020 12:35:39 -0400</PostedAt>
<EditAt>Thu, 26 Mar 2020 22:57:09 -0400</EditAt>
</NewsItem>

<NewsItem contentIssues="false" id="91569" important="false" status="posted" url="https://beta.my.umbc.edu/groups/itsecurity/posts/91569">
<Title>Fake COVID-19 (Coronavirus) Apps</Title>
<Tagline>Beware of Fake Coronavirus Smartphone Apps</Tagline>
<Body>
<![CDATA[
    <div class="html-content"><div><span><p><span>An Android app, advertised as a coronavirus tracker, mimics the display of the Johns Hopkins Coronavirus Research Center main page but also installs spyware into the phone.<sup>1</sup></span><span>  </span></p><br><p><span>A similar app was offered from a malicious site that mirrored live data from a legitimate website and added a banner urging viewers to download the malware.  If a person was tricked into downloading the malware, the malware would lock the person's phone and present the user with a ransom demand.<sup>2</sup></span></p>
    <div><br></div>
    </span></div>
    <hr>
    <ol><li><span><a href="https://www.forbes.com/sites/thomasbrewster/2020/03/18/coronavirus-scam-alert-covid-19-map-malware-can-spy-on-you-through-your-android-microphone-and-camera/#5857d81c75fd">https://www.forbes.com/sites/thomasbrewster/2020/03/18/coronavirus-scam-alert-covid-19-map-malware-can-spy-on-you-through-your-android-microphone-and-camera/#5857d81c75fd</a></span></li><li><span><a href="https://abcnews.go.com/US/online-scammers-target-vulnerable-internet-users-coronavirus-outbreak/story?id=69675134">https://abcnews.go.com/US/online-scammers-target-vulnerable-internet-users-coronavirus-outbreak/story?id=69675134</a></span></li></ol></div>
]]>
</Body>
<Summary>An Android app, advertised as a coronavirus tracker, mimics the display of the Johns Hopkins Coronavirus Research Center main page but also installs spyware into the phone.1     A similar app was...</Summary>
<Website>https://itsecurity.umbc.edu/covid19</Website>
<TrackingUrl>https://beta.my.umbc.edu/api/v0/pixel/news/91569/guest@my.umbc.edu/ce3ecf899a5763393224826c8ad4bf6d/api/pixel</TrackingUrl>
<Tag>covid19</Tag>
<Tag>notice</Tag>
<Group token="itsecurity">IT Security - DoIT Cybersecurity Assurance and Digital Trust</Group>
<GroupUrl>https://beta.my.umbc.edu/groups/itsecurity</GroupUrl>
<AvatarUrl>https://assets1-beta.my.umbc.edu/images/avatars/group/7/xsmall.png?1777162216</AvatarUrl>
<AvatarUrl size="original">https://assets4-beta.my.umbc.edu/images/avatars/group/7/original.png?1777162216</AvatarUrl>
<AvatarUrl size="xxlarge">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xxlarge.png?1777162216</AvatarUrl>
<AvatarUrl size="xlarge">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xlarge.png?1777162216</AvatarUrl>
<AvatarUrl size="large">https://assets4-beta.my.umbc.edu/images/avatars/group/7/large.png?1777162216</AvatarUrl>
<AvatarUrl size="medium">https://assets4-beta.my.umbc.edu/images/avatars/group/7/medium.png?1777162216</AvatarUrl>
<AvatarUrl size="small">https://assets1-beta.my.umbc.edu/images/avatars/group/7/small.png?1777162216</AvatarUrl>
<AvatarUrl size="xsmall">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xsmall.png?1777162216</AvatarUrl>
<AvatarUrl size="xxsmall">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xxsmall.png?1777162216</AvatarUrl>
<Sponsor>IT Security - DoIT</Sponsor>
<PawCount>0</PawCount>
<CommentCount>0</CommentCount>
<CommentsAllowed>true</CommentsAllowed>
<PostedAt>Wed, 25 Mar 2020 11:57:09 -0400</PostedAt>
<EditAt>Thu, 26 Mar 2020 23:00:36 -0400</EditAt>
</NewsItem>

<NewsItem contentIssues="false" id="91548" important="false" status="posted" url="https://beta.my.umbc.edu/groups/itsecurity/posts/91548">
<Title>Phishing Email Impersonates Dr. Hrabowski</Title>
<Tagline>Beware of Obvious Signs of Phishing</Tagline>
<Body>
<![CDATA[
    <div class="html-content"><p>A new phishing email has been hitting inboxes recently:</p>
    <table border="1"><tbody><tr><td><pre>Date: Mon, 23 Mar 2020 16:07:19 +0300&#x000A;    From: President Edu &#x000A;    &#x000A;    hello good day, let me know when you are available. there is something  &#x000A;    i need you to do. i am stuck in a seminar right now, kindly drop your&#x000A;    cellphone number to send text message</pre><pre>Freeman A. Hrabowski III&#x000A;    &#x000A;    President&#x000A;    &#x000A;    </pre></td></tr></tbody></table>
    <p><span>This is not a very well-crafted message.  Some things to note:</span></p><p><span><br></span></p><ul><li><p><span>The timezone on the Date, +0300, suggests that the message originated in Eastern Europe, East Africa, or the Arabian Peninsula.   </span></p></li><li><p><span>The From header says “President Edu” which is not Dr. Hrabowski’s name.</span></p></li><li><p><span>The email address that the message was sent from does not come from umbc.edu.</span></p></li><li><p><span>The recipient is asked to provide a cell phone number for a text message.  Why not just say what needs to be said in the email and provide a cell phone number for the reply?</span></p></li><li><p><span>The capitalization, punctuation, grammar are not professional or proper. </span></p></li></ul><span><br></span><p><span>This type of phishing message has become common.  If the recipient responds, they will receive a text message asking them to purchase gift cards, and send the relevant gift card information back to the scammers.  Messages like this are sometimes texted directly to people’s phones at random.  If the gift card information is sent to the scammer, the scammer will immediately drain the money from the gift card, and the money will be gone. </span></p><p><span><br></span></p><p><span><u>If you receive one of these messages, do not respond or reply.  Just forward the message to <a href="mailto:security@umbc.edu">security@umbc.edu</a> and delete the message.</u>  </span></p><p><span><br></span></p><p><span>For more information on spotting phishing message and handling spam, please check out our FAQ:  <a href="https://wiki.umbc.edu/x/HwMxAg" rel="nofollow external" class="bo">Phishing &amp; Spam</a></span></p></div>
]]>
</Body>
<Summary>A new phishing email has been hitting inboxes recently:   Date: Mon, 23 Mar 2020 16:07:19 +0300 From: President Edu   hello good day, let me know when you are available. there is something   i...</Summary>
<Website>https://itsecurity.umbc.edu</Website>
<TrackingUrl>https://beta.my.umbc.edu/api/v0/pixel/news/91548/guest@my.umbc.edu/163b4b5742cd76ae50f18c0762bdf279/api/pixel</TrackingUrl>
<Tag>notice</Tag>
<Group token="itsecurity">IT Security - DoIT Cybersecurity Assurance and Digital Trust</Group>
<GroupUrl>https://beta.my.umbc.edu/groups/itsecurity</GroupUrl>
<AvatarUrl>https://assets1-beta.my.umbc.edu/images/avatars/group/7/xsmall.png?1777162216</AvatarUrl>
<AvatarUrl size="original">https://assets4-beta.my.umbc.edu/images/avatars/group/7/original.png?1777162216</AvatarUrl>
<AvatarUrl size="xxlarge">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xxlarge.png?1777162216</AvatarUrl>
<AvatarUrl size="xlarge">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xlarge.png?1777162216</AvatarUrl>
<AvatarUrl size="large">https://assets4-beta.my.umbc.edu/images/avatars/group/7/large.png?1777162216</AvatarUrl>
<AvatarUrl size="medium">https://assets4-beta.my.umbc.edu/images/avatars/group/7/medium.png?1777162216</AvatarUrl>
<AvatarUrl size="small">https://assets1-beta.my.umbc.edu/images/avatars/group/7/small.png?1777162216</AvatarUrl>
<AvatarUrl size="xsmall">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xsmall.png?1777162216</AvatarUrl>
<AvatarUrl size="xxsmall">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xxsmall.png?1777162216</AvatarUrl>
<Sponsor>IT Security - DoIT</Sponsor>
<PawCount>0</PawCount>
<CommentCount>0</CommentCount>
<CommentsAllowed>true</CommentsAllowed>
<PostedAt>Tue, 24 Mar 2020 16:26:48 -0400</PostedAt>
<EditAt>Thu, 26 Mar 2020 23:10:09 -0400</EditAt>
</NewsItem>

<NewsItem contentIssues="false" id="91523" important="false" status="posted" url="https://beta.my.umbc.edu/groups/itsecurity/posts/91523">
<Title>Work from Home Email Scam</Title>
<Tagline>Something smells a little phishy...</Tagline>
<Body>
<![CDATA[
    <div class="html-content"><p><span>Here is the content of a likely phishing message:</span></p><p><span><table border="1"><tbody><tr><td><pre>Name of Company:&#x000A;    &#x000A;    Asics&#x000A;    &#x000A;    &#x000A;    JOB TITLE:&#x000A;    &#x000A;    Get Paid to Drive&#x000A;    &#x000A;    &#x000A;    JOB DESCRIPTION:&#x000A;    &#x000A;    We seek interested applicants to go about their normal routine with the&#x000A;    advert of the World Athletics Championships OREGON 21 Logo IAAF on their&#x000A;    Car&#x000A;    &#x000A;    &#x000A;    Qualifications:&#x000A;    &#x000A;    Must have a Car, Truck, Van or Motorcycle.&#x000A;    &#x000A;    &#x000A;    SALARY:&#x000A;    &#x000A;    $300 weekly including $50 for gas&#x000A;    &#x000A;    &#x000A;    For more information interested Candidates should contact:&#x000A;    <a href="mailto:getpaidtodrive@wrapvertise.org">getpaidtodrive@wrapvertise.org</a> with their personal email.&#x000A;    &#x000A;    Micheal Manley&#x000A;    &#x000A;    Hiring Coordinator/Logistic Supervisor&#x000A;    </pre></td></tr></tbody></table></span></p><p><span>While we cannot guarantee that this is a scam, we encourage anyone interested by this advertisement to read </span><a href="https://www.asics.com/us/en-us/consumer-alert.html" rel="nofollow external" class="bo"><span>https://www.asics.com/us/en-us/consumer-alert.html</span></a><span> and to contact the company at the email address they provide: <a href="mailto:aac-PR@asics.com">aac-PR@asics.com</a> .</span></p></div>
]]>
</Body>
<Summary>Here is the content of a likely phishing message:   Name of Company:  Asics   JOB TITLE:  Get Paid to Drive   JOB DESCRIPTION:  We seek interested applicants to go about their normal routine with...</Summary>
<Website>https://itsecurity.umbc.edu</Website>
<TrackingUrl>https://beta.my.umbc.edu/api/v0/pixel/news/91523/guest@my.umbc.edu/0e519a85d9a7840b3f948fa0f984e0c8/api/pixel</TrackingUrl>
<Tag>notice</Tag>
<Group token="itsecurity">IT Security - DoIT Cybersecurity Assurance and Digital Trust</Group>
<GroupUrl>https://beta.my.umbc.edu/groups/itsecurity</GroupUrl>
<AvatarUrl>https://assets1-beta.my.umbc.edu/images/avatars/group/7/xsmall.png?1777162216</AvatarUrl>
<AvatarUrl size="original">https://assets4-beta.my.umbc.edu/images/avatars/group/7/original.png?1777162216</AvatarUrl>
<AvatarUrl size="xxlarge">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xxlarge.png?1777162216</AvatarUrl>
<AvatarUrl size="xlarge">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xlarge.png?1777162216</AvatarUrl>
<AvatarUrl size="large">https://assets4-beta.my.umbc.edu/images/avatars/group/7/large.png?1777162216</AvatarUrl>
<AvatarUrl size="medium">https://assets4-beta.my.umbc.edu/images/avatars/group/7/medium.png?1777162216</AvatarUrl>
<AvatarUrl size="small">https://assets1-beta.my.umbc.edu/images/avatars/group/7/small.png?1777162216</AvatarUrl>
<AvatarUrl size="xsmall">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xsmall.png?1777162216</AvatarUrl>
<AvatarUrl size="xxsmall">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xxsmall.png?1777162216</AvatarUrl>
<Sponsor>IT Security - DoIT</Sponsor>
<PawCount>1</PawCount>
<CommentCount>0</CommentCount>
<CommentsAllowed>true</CommentsAllowed>
<PostedAt>Mon, 23 Mar 2020 20:08:29 -0400</PostedAt>
<EditAt>Tue, 24 Mar 2020 16:31:25 -0400</EditAt>
</NewsItem>

<NewsItem contentIssues="false" id="89107" important="false" status="posted" url="https://beta.my.umbc.edu/groups/itsecurity/posts/89107">
<Title>Spear Phishing Attacks On The Rise</Title>
<Tagline>Community members being targeted for gift card scams</Tagline>
<Body>
<![CDATA[
    <div class="html-content"><div>The DoIT Security Group has received reports of a phishing scam targeting the UMBC community.  Please be aware that hackers are sending these email messages to students, faculty, and staff.</div><div><br></div><div>The phishing email contents are similar to the following:</div>
    <pre>---------------------------------------------------------------&#x000A;    Subject: On Campus and Available?&#x000A;    To:&#x000A;    Are you available?I need you to handle something for&#x000A;    me Now, i'm currently in a meeting with the International&#x000A;    Advisory Committee (IAC) with limited phone call&#x000A;    ( phone got broken) and also experiencing some&#x000A;    difficulties at the moment, just reply to my e-mail as&#x000A;    soon as you get this. Are you available?&#x000A;    &#x000A;    Best Regards&#x000A;    &#x000A;    (Academic Department Chair)&#x000A;    University of Maryland Baltimore County&#x000A;    1000 Hilltop Circle&#x000A;    Baltimore, MD 21250&#x000A;    &#x000A;    Sent from my iPad, please excuse any typos or&#x000A;    strange auto-corrections”&#x000A;    ---------------------------------------------------------------</pre>
    <div><br></div><div>There are many characteristics that raise suspicions that this is a phishing email; for example, the vague nature of the email content and poor grammar are red flags. Also, the unrelated nature of the email should be an initial giveaway.</div><div><br></div><div>However, the biggest concern is the hacker posing as a trusted entity. In this email, they use a specific form of phishing known as spear phishing to target specific members of the UMBC community. Attackers often gather information about organizations in order to make their phishing scams more personal and believable. Here, the hacker impersonates a number of UMBC personnel in order to target staff within the corresponding departments from the impersonated individuals. </div><div><br></div><div>The best defense against spear phishing is vigilance. If you receive this email, please be aware of its malicious nature and do NOT reply to it. Replying to this email could further engage the hacker in hopes that you’ll reveal sensitive information that could compromise your online and physical safety.</div><div><br></div><div>If you receive this email or one with related content, please forward it to <a href="mailto://security@umbc.edu" rel="nofollow external" class="bo">security@umbc.edu</a> with full headers (directions can be found here: <a href="https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970" rel="nofollow external" class="bo">https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970</a>) and delete the email immediately.  If you feel your information or safety has been violated in any way, you are also encouraged to call UMBC Police at (410) 455-5555.  </div><div><br></div><div>For more information regarding phishing and spam FAQs, please see the PHISHING/SPAM FAQS section of <a href="https://itsecurity.umbc.edu" rel="nofollow external" class="bo">itsecurity.umbc.edu</a>.</div></div>
]]>
</Body>
<Summary>The DoIT Security Group has received reports of a phishing scam targeting the UMBC community.  Please be aware that hackers are sending these email messages to students, faculty, and staff....</Summary>
<Website>https://itsecurity.umbc.edu/spam-and-phishing-faqs/</Website>
<TrackingUrl>https://beta.my.umbc.edu/api/v0/pixel/news/89107/guest@my.umbc.edu/4e537fecb7e2b9e8a00d281858bcf98e/api/pixel</TrackingUrl>
<Tag>notice</Tag>
<Group token="itsecurity">IT Security - DoIT Cybersecurity Assurance and Digital Trust</Group>
<GroupUrl>https://beta.my.umbc.edu/groups/itsecurity</GroupUrl>
<AvatarUrl>https://assets1-beta.my.umbc.edu/images/avatars/group/7/xsmall.png?1777162216</AvatarUrl>
<AvatarUrl size="original">https://assets4-beta.my.umbc.edu/images/avatars/group/7/original.png?1777162216</AvatarUrl>
<AvatarUrl size="xxlarge">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xxlarge.png?1777162216</AvatarUrl>
<AvatarUrl size="xlarge">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xlarge.png?1777162216</AvatarUrl>
<AvatarUrl size="large">https://assets4-beta.my.umbc.edu/images/avatars/group/7/large.png?1777162216</AvatarUrl>
<AvatarUrl size="medium">https://assets4-beta.my.umbc.edu/images/avatars/group/7/medium.png?1777162216</AvatarUrl>
<AvatarUrl size="small">https://assets1-beta.my.umbc.edu/images/avatars/group/7/small.png?1777162216</AvatarUrl>
<AvatarUrl size="xsmall">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xsmall.png?1777162216</AvatarUrl>
<AvatarUrl size="xxsmall">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xxsmall.png?1777162216</AvatarUrl>
<Sponsor>IT Security - DoIT</Sponsor>
<PawCount>5</PawCount>
<CommentCount>0</CommentCount>
<CommentsAllowed>true</CommentsAllowed>
<PostedAt>Tue, 10 Dec 2019 16:36:32 -0500</PostedAt>
<EditAt>Tue, 10 Dec 2019 16:38:21 -0500</EditAt>
</NewsItem>

<NewsItem contentIssues="false" id="85700" important="false" status="posted" url="https://beta.my.umbc.edu/groups/itsecurity/posts/85700">
<Title>Ransomware Slams Enterprises with $5.8M Blackmail Demands</Title>
<Tagline>Retrieved from ZDnet - By: Charlie Osborne</Tagline>
<Body>
<![CDATA[
    <div class="html-content">A new ransomware called 'MegaCortex" is hitting enterprise firms in the US and Europe demanding millions of dollars through blackmail and encryption.<div><br></div><div>Read more here:</div><div><a href="https://www.zdnet.com/article/megacortex-ransomware-slams-eu-firms-with-demands-of-up-to-5-8-million/#ftag=RSSbaffb68" rel="nofollow external" class="bo">https://www.zdnet.com/article/megacortex-ransomware-slams-eu-firms-with-demands-of-up-to-5-8-million/#ftag=RSSbaffb68</a></div></div>
]]>
</Body>
<Summary>A new ransomware called 'MegaCortex" is hitting enterprise firms in the US and Europe demanding millions of dollars through blackmail and encryption.    Read more here:...</Summary>
<TrackingUrl>https://beta.my.umbc.edu/api/v0/pixel/news/85700/guest@my.umbc.edu/cc8a9b3a1fddc8b1a490ce92291c9d26/api/pixel</TrackingUrl>
<Tag>it</Tag>
<Group token="itsecurity">IT Security - DoIT Cybersecurity Assurance and Digital Trust</Group>
<GroupUrl>https://beta.my.umbc.edu/groups/itsecurity</GroupUrl>
<AvatarUrl>https://assets1-beta.my.umbc.edu/images/avatars/group/7/xsmall.png?1777162216</AvatarUrl>
<AvatarUrl size="original">https://assets4-beta.my.umbc.edu/images/avatars/group/7/original.png?1777162216</AvatarUrl>
<AvatarUrl size="xxlarge">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xxlarge.png?1777162216</AvatarUrl>
<AvatarUrl size="xlarge">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xlarge.png?1777162216</AvatarUrl>
<AvatarUrl size="large">https://assets4-beta.my.umbc.edu/images/avatars/group/7/large.png?1777162216</AvatarUrl>
<AvatarUrl size="medium">https://assets4-beta.my.umbc.edu/images/avatars/group/7/medium.png?1777162216</AvatarUrl>
<AvatarUrl size="small">https://assets1-beta.my.umbc.edu/images/avatars/group/7/small.png?1777162216</AvatarUrl>
<AvatarUrl size="xsmall">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xsmall.png?1777162216</AvatarUrl>
<AvatarUrl size="xxsmall">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xxsmall.png?1777162216</AvatarUrl>
<Sponsor>IT Security - DoIT</Sponsor>
<PawCount>0</PawCount>
<CommentCount>0</CommentCount>
<CommentsAllowed>true</CommentsAllowed>
<PostedAt>Mon, 05 Aug 2019 08:54:20 -0400</PostedAt>
</NewsItem>

<NewsItem contentIssues="false" id="85659" important="false" status="posted" url="https://beta.my.umbc.edu/groups/itsecurity/posts/85659">
<Title>U.S. Indicts for Phishing Campaign Targeting Colleges</Title>
<Tagline>Retrieved from SCMagazine - By: Bradley Barth</Tagline>
<Body>
<![CDATA[
    <div class="html-content">The DOJ indicted three people on multiple charges regarding phishing scams that targeted college employees, banks and other businesses.<div><br></div><div>Read more here:</div><div><a href="https://www.scmagazine.com/home/security-news/legal-security-news/u-s-indicts-three-over-alleged-phishing-campaign-targeting-universities-businesses/" rel="nofollow external" class="bo">https://www.scmagazine.com/home/security-news/legal-security-news/u-s-indicts-three-over-alleged-phishing-campaign-targeting-universities-businesses/</a></div></div>
]]>
</Body>
<Summary>The DOJ indicted three people on multiple charges regarding phishing scams that targeted college employees, banks and other businesses.    Read more here:...</Summary>
<TrackingUrl>https://beta.my.umbc.edu/api/v0/pixel/news/85659/guest@my.umbc.edu/46dfc90aaea9a303246c8c2391f2a929/api/pixel</TrackingUrl>
<Tag>it</Tag>
<Group token="itsecurity">IT Security - DoIT Cybersecurity Assurance and Digital Trust</Group>
<GroupUrl>https://beta.my.umbc.edu/groups/itsecurity</GroupUrl>
<AvatarUrl>https://assets1-beta.my.umbc.edu/images/avatars/group/7/xsmall.png?1777162216</AvatarUrl>
<AvatarUrl size="original">https://assets4-beta.my.umbc.edu/images/avatars/group/7/original.png?1777162216</AvatarUrl>
<AvatarUrl size="xxlarge">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xxlarge.png?1777162216</AvatarUrl>
<AvatarUrl size="xlarge">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xlarge.png?1777162216</AvatarUrl>
<AvatarUrl size="large">https://assets4-beta.my.umbc.edu/images/avatars/group/7/large.png?1777162216</AvatarUrl>
<AvatarUrl size="medium">https://assets4-beta.my.umbc.edu/images/avatars/group/7/medium.png?1777162216</AvatarUrl>
<AvatarUrl size="small">https://assets1-beta.my.umbc.edu/images/avatars/group/7/small.png?1777162216</AvatarUrl>
<AvatarUrl size="xsmall">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xsmall.png?1777162216</AvatarUrl>
<AvatarUrl size="xxsmall">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xxsmall.png?1777162216</AvatarUrl>
<Sponsor>IT Security - DoIT</Sponsor>
<PawCount>0</PawCount>
<CommentCount>0</CommentCount>
<CommentsAllowed>true</CommentsAllowed>
<PostedAt>Thu, 01 Aug 2019 14:39:01 -0400</PostedAt>
<EditAt>Thu, 01 Aug 2019 14:41:34 -0400</EditAt>
</NewsItem>

<NewsItem contentIssues="false" id="85630" important="false" status="posted" url="https://beta.my.umbc.edu/groups/itsecurity/posts/85630">
<Title>Capital One Data Breach Hits More than 100 Million People</Title>
<Body>
<![CDATA[
    <div class="html-content">A woman hacked into Capital One systems; accessing sensitive information such as credit reports and social security numbers of about 140,000 people. The breach affected more than 100 million people in the U.S. and Canada.<div><br></div><div>Read more here:</div><div><a href="https://www.cbsnews.com/news/capital-one-data-breach-2019-more-than-100-million-people-applying-for-credit-affected-today-2019-07-29/" rel="nofollow external" class="bo">https://www.cbsnews.com/news/capital-one-data-breach-2019-more-than-100-million-people-applying-for-credit-affected-today-2019-07-29/</a></div></div>
]]>
</Body>
<Summary>A woman hacked into Capital One systems; accessing sensitive information such as credit reports and social security numbers of about 140,000 people. The breach affected more than 100 million...</Summary>
<TrackingUrl>https://beta.my.umbc.edu/api/v0/pixel/news/85630/guest@my.umbc.edu/dd66240bde43368a251cba0ec0092033/api/pixel</TrackingUrl>
<Tag>it</Tag>
<Group token="itsecurity">IT Security - DoIT Cybersecurity Assurance and Digital Trust</Group>
<GroupUrl>https://beta.my.umbc.edu/groups/itsecurity</GroupUrl>
<AvatarUrl>https://assets1-beta.my.umbc.edu/images/avatars/group/7/xsmall.png?1777162216</AvatarUrl>
<AvatarUrl size="original">https://assets4-beta.my.umbc.edu/images/avatars/group/7/original.png?1777162216</AvatarUrl>
<AvatarUrl size="xxlarge">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xxlarge.png?1777162216</AvatarUrl>
<AvatarUrl size="xlarge">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xlarge.png?1777162216</AvatarUrl>
<AvatarUrl size="large">https://assets4-beta.my.umbc.edu/images/avatars/group/7/large.png?1777162216</AvatarUrl>
<AvatarUrl size="medium">https://assets4-beta.my.umbc.edu/images/avatars/group/7/medium.png?1777162216</AvatarUrl>
<AvatarUrl size="small">https://assets1-beta.my.umbc.edu/images/avatars/group/7/small.png?1777162216</AvatarUrl>
<AvatarUrl size="xsmall">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xsmall.png?1777162216</AvatarUrl>
<AvatarUrl size="xxsmall">https://assets1-beta.my.umbc.edu/images/avatars/group/7/xxsmall.png?1777162216</AvatarUrl>
<Sponsor>IT Security - DoIT</Sponsor>
<PawCount>0</PawCount>
<CommentCount>0</CommentCount>
<CommentsAllowed>true</CommentsAllowed>
<PostedAt>Tue, 30 Jul 2019 15:07:50 -0400</PostedAt>
</NewsItem>

</News>
