UCSF IT Technology

Recent email-based attacks have abused Microsoft’s legitimate OneNote application to share malicious files. The emails use subject lines like “New Document Shared with you” and encourage the recipient to follow a link to view a shared OneNote file.  The OneNote link leads recipients to a shared document which contains the text “DOUBLE CLICK TO DOWNLOAD THE FILE NOW.”Some attacks may also distribute similar malicious OneNote files as email attachments.

Cybercriminals have launched a series of phishing attacks using timely email phishing lures related to annual compensation reviews and bonuses. The phishing emails encourage recipients to click a lure to confirm a payment-related change.Opening the link leads to a lookalike Microsoft login page, which is designed to steal credentials. The sending email address for the phishing emails is “hrdp” followed by a randomized string of letters and numbers.

Cybercriminals have launched a series of phishing attacks using an emailed fax of an alleged paycheck as a lure.

Cybercriminals have launched a series of phishing attacks using the promise of a paid Christmas bonus as a lure.

Scammers are tampering with physical gift cards in retail store locations. In these attacks, scammers place barcode stickers on top of the legitimate gift card barcode.The barcode stickers redirect any funds a customer purchases for the intended gift card to an attacker-controlled account instead.Inspect physical gift cards before purchase.