UCSF IT Technology

Threat Alert: Phishing Attacks Abuse Proofpoint Branding

Threat Alert: Phishing Attacks Use Lawsuit-Themed Lures to Spread Malicious Scripts

Threat Alert: Social Engineering Attacks Target GitHub Developers

Recent phishing emails are masquerading as notifications alerting the recipient to an automatic renewal of Best Buy’s Geek Squad Total Protect & Webroot Advance Threat Protection. The emails, however, do not use Best Buy sending addresses. Unlike many traditional phishing attacks, the emails do not include malicious links or attachments. Instead, recipients are told to call a phone number in the email for any questions regarding the service.

Cybercriminals have launched series of phishing attacks claiming to be from the recipient’s HR department.The lures use a variety of sender names like HR Alerts or HR Department; however, the actual sending address is not associated with a recipient’s company or HR department.The lures typically direct the recipient to take immediate action regarding an HR assignment or alert by clicking on a malicious link leading to the download of a zipped .url file or downloading a PDF attachment.