UCSF IT Technology

Threat Alert: Phishing Attacks Use Lawsuit-Themed Lures to Spread Malicious Scripts

Threat Alert: Social Engineering Attacks Target GitHub Developers

Recent phishing emails are masquerading as notifications alerting the recipient to an automatic renewal of Best Buy’s Geek Squad Total Protect & Webroot Advance Threat Protection. The emails, however, do not use Best Buy sending addresses. Unlike many traditional phishing attacks, the emails do not include malicious links or attachments. Instead, recipients are told to call a phone number in the email for any questions regarding the service.

Cybercriminals have launched series of phishing attacks claiming to be from the recipient’s HR department.The lures use a variety of sender names like HR Alerts or HR Department; however, the actual sending address is not associated with a recipient’s company or HR department.The lures typically direct the recipient to take immediate action regarding an HR assignment or alert by clicking on a malicious link leading to the download of a zipped .url file or downloading a PDF attachment.

The Royal Bank of Canada (RBC) issued a consumer alert warning of voice phishing (vishing) calls impersonating the financial institution. The calls appear to come from a toll-free number, and a recorded message informs the user that RBC has detected a potential fraud issue. These calls do not provide a name or information about who the fraud may impact. The calls then direct the user to a voice message box, where the user is instructed to leave their contact information.

Cybercriminals have launched a series of phishing attacks that claim to inform the recipient of physical altercations between employees and equipment damage at a worksite.  The lures include a malicious attachment allegedly containing a video of the altercation.