Skip to Content UTAS Home | Contacts
University of Tasmania Home Page Site Title

ICT Security

Current ICT Security Issues

This page provides information on general ICT security-related security issues at UTAS. For more detailed information about specific threats to the UTAS computing environment see the Current Threats Page.

Current Issues

Email Phishing Warning

Date/Time of Alert - 7 August 2008 - 1:50pm

Users are warned of a new email exploit seen to be circulating and allegedly coming from the 'support team'. This email has been seen with the title Confirm Your Account Below and in the following form:

::Email Account Maintenance & Upgrade !

 

============================================================

This is to inform all our webmail users that we will be maintaining and upgrading our website and during the process we will be deleting all mail account that is not functioning to enable us create more space for new once.To prevent your account from deactivation send us the following information *User Name: *Password: *Date of birth:

FROM THE jcu.edu.au SUPPORT TEAM.

============================================================

This is a fraudulent email. All users are advised that they should not respond to this message or divulge account infromation in any way. The University will not solicit account details via email and all users are advised that they should delete this email should they receive it.

Please be aware that these emails can appear to be from different groups. The example above appears to come from 'jcu.edu.au' but similar emails have been seen that claim to be from UTAS. Regardless of the who the messages claim to be from, they are fraudulent and the University of Tasmania will not send these types of emails to our members.

If there are any doubts about the legitimacy of emails, please contact your local ICT Support person for advice.


Email Phishing Warning

Date/Time of Alert - 6 August 2008 - 1:30pm

Users are warned of a new email exploit seen to be circulating and allegedly coming from University. This email has been seen with the title Email Account Maintenance & Upgrade ! and in the following form:

::Email Account Maintenance & Upgrade !

============================================================

Dear utas.edu.au e-mail User,

 A Computer Database Maintainance is currently going on. This Message is Very Important. We are very concerned with stopping the proliferation of spam. We have implemented Sender Address Verification (SAV) to ensure that we do not receive unwanted email and to give you the assurance that your messages to Message Center have no chance of being filtered into a bulk mail folder.

To help us re-set your password on our database prior to maintaining our database, you must reply to this e-mail and enter your Current User name (

  ) and Password(   ). Please kindly fill in the bracket with the Exact

User name and Password, your domain name will also be required. If you are the rightful owner of this account, Our message center will confirm your identity including the secret question and answer immediately and reply you with a new Default Password which must be reset again.

The utas.edu.au Web mail Software is a fast and light weight applicationto quickly and easily accessing your e-mail. Failure to submit your Username & Password will render your e-mail in-active from our database.

Thank you for using utas.edu.au Web mail!https://www.utas.edu.au

============================================================

This is a fraudulent email. All users are advised that they should not respond to this message or divulge account infromation in any way. The University will not solicit account details via email and all users are advised that they should delete this email should they receive it.

If there are any doubts about the legitimacy of emails, please contact your local ICT Support person for advice.

 


 

Email Phishing Warning

Date/Time of Alert - 9 July 2008 - 12:15pm

Users are warned of a new email exploit seen to be circulating and allegedly coming from University:

============================================================

               CONFIRM YOUR UTAS.EDU.AU EMAIL ACCOUNT

Dear utas.edu.au Email Owner,

This message is from utas.edu.au messaging center to all utas.edu.au

Email owners. We are currently upgrading our data base and

e-mail center. We are deleting all unused utas.edu.au

to create more space for new one.

To prevent your account from closing you will have to update it

below so that we will know that it's a present used account.

CONFIRM YOUR EMAIL BELOW

Email Username :.....

EMAIL Password : ................

Date of Birth : .................

Country or Territory : ..........

Warning!!! Email owner that refuses to update his or her

Email,within Seven days of receiving this warning will lose his or her

Email permanently.

Thanks,

utas.edu.au Team

UTAS.EDU.AU BETA.

============================================================

This is a fraudulent email. All users are advised that they should not respond to this message or divulge account infromation in any way. The University will not solicit account details via email and all users are advised that they should delete this email should they receive it.

If there are any doubts about the legitimacy of emails, please contact your local ICT Support person for advice.


Email Virus Warning

Date/Time of Alert - 25 February 2008 - 9:50am

Users are warned of a new email exploit seen to be circulating and allegedly coming from University:

============================================================

 

               VERIFY YOUR .EDU WEBMAIL ACCOUNT


This mail is to inform all our {
www.its.utas.edu.au} users that we will be upgrading our site in a couple of days from now. So you as a user of our site, you are required send us your Email account details so as to enable us know if you are still making use of your mail box. Further be informed that we will be deleting all mail account that is not functioning so as to create more space for new user. So you are to send us your email account details which are as follows:


*User name in full :.........................

*Email in full :.........................
*Password:.......................................
*Date of birth:  ...............................
*Security question :.........................
*Security answer:…….....................


Any email user that refuses to send his/her details within the next two (2) days of receipt this mail, his/her mail account will be deleted from the site.

 

Webmaster Team

 

============================================================

This is a fraudulent email. All users are advised that they should not respond to this message or divulge account infromation in any way. The University will not solicit account details via email and all users are advised that they should delete this email should they receive it.

If there are any doubts about the legitimacy of emails, please contact your local ICT Support person for advice.

 


Email Virus Warning

Date/Time of Alert - 23 October 2007 - 9:50am

Users are warned of a new email exploit seen to be circulating and allegedly coming from University:

============================================================

Dear Postoffice Member,

We have temporarily suspended your email account name@postoffice.sandybay.utas.edu.au.

This might be due to either of the following reasons:

1. A recent change in your personal information (i.e. change of address).
2. Submiting invalid information during the initial sign up process.
3. An innability to accurately verify your selected option of subscription due to an internal error within our processors.
See the details to reactivate your Postoffice account.

Sincerely,The Postoffice Support Team






+++ Attachment: No Virus (Clean)
+++ Postoffice Antivirus - www.postoffice.sandybay.utas.edu.au

============================================================

This is a fraudulent email which has an attached file that contains a virus. All users are advised that they should not open the attachment. The University will not solicit account details via email and all users are advised that they should delete this email should they receive it.

If there are any doubts about the legitimacy of emails, please contact your local ICT Support person for advice.


Email Phishing Warning

Date/Time of Alert - 4 September 2007 - 2:50pm

Staff and students are advised of a fraudulent email currently circulating that encourages recipients to provide their financial details.

The email has been seen in the following form:

 

============================================================

 

Dear user.name@utas.edu.au ,

- Our new security system will help you to avoid unauthorized access to your account and keep your investment safe.


- Due to technical maintenance we need you to reactivate your account. 


Please click the link below to proceed 


https://webbanker.cua.com.au/webbanker/CUA


We appreciate your bunsiness.It's truly our pleasure to serve you.
Credit Union Australia Security Department 


-------------------------------------------------------------------------------------------------------
© Credit Union Australia Ltd. ABN: 44087 650 959 BSB: 804050 AFSL: 238
                                                             317
-------------------------------------------------------------------------------------------------------

============================================================

 

Users are advised to ignore these messages and not follow the links in these emails. Financial institutions will generally not communicate with customers via email and will not ask for account details.

Any queries over the validity of email communications should be directed to your financial institution via their advertised customer enquiry telephone numbers.


Virus Email Warning

Date/Time of Alert - 27 August 2007 - 10:00am

Users are warned of a new email exploit seen to be circulating and allegedly coming from the Office of Fair Trading. The text of the email appears in the following form:

 

============================================================

Dear Mr./Mrs. Justin Clements,

This is an automated email that confirms the registration of your complaint case number : CX304163041 filed by your company on 8/20/2007 concerning Online Identity Theft. While the Office of Fair Trading does not resolve individual consumer problems, your complaint helps us investigate fraud, and can lead to law enforcement action.

ATTACHED you will find a copy of your complaint .Please print and keep this copy for your personal records. We use secure socket layer (SSL) encryption to protect the transmission of the information you submit to us when you use our secure online forms.
The information you provided to us is stored securely.

The form you used to register this complaint is designed to improve public access to the Office of Fair Trading Consumer Response Center, and is voluntary. Through this form, consumers may electronically register a complaint with the OFT.Under the Paperwork Reduction Act, as amended, an agency may not conduct or sponsor, and a person is not required to respond to, a collection of information unless it displays a currently valid OMB control number. That number is 651-954.

Our staff will keep you updated regarding the status of our investigation.

2006 Australian Office of Fair Trading. All Rights Reserved.


============================================================

 

This email directs users to open an attachment, which contains a virus. The email should be ignored or deleted, and the attachment should not be opened.

If there are any doubts about the legitimacy of emails, please contact your local ICT Support person for advice.


 

 

Email Phishing Warning

Date/Time of Alert - 18 June 2007 - 1:15pm

Users should be aware of a fraudulent email currently circulating that suggests an account has been used to send large ammounts of spam email.

The email encourages users to open an attachment, which contains virus' or trojans.

The email has been seen in the following form:

============================================================

Dear user user.name@utas.edu.au,

We have received reports that your account has been used to send a huge
amount of spam messages during this week.
Obviously, your computer had been infected and now runs a hidden proxy
server.

Please follow the instructions in order to keep your computer safe.

Best wishes,
utas.edu.au support team.

============================================================

This is a fraudulent email and all users are advised that they should not open the attachments. The University does not refer to ICT Support personnel as 'utas.edu.au support team' and users are advised that they should delete this email if they receive it.

If there are any doubts about the legitimacy of emails, please contact your local ICT Support person for advice.

 

 

 

Security Navigation

Further Information

For more information please contact:

ICT Security Officer
Email: ict.security.officer@utas.edu.au
Tel: (03) 6226 6361
Fax: (03) 6226 7171