UCSF IT Technology

Cybercriminals have launched a campaign distributing malware with an AI-themed lure.  The lure purports to be from an “Information Technology Manager” regarding a mandatory system update for employees.

Cybercriminals have launched phishing attacks using lures that impersonate Microsoft Teams meeting invites. The lures include a malicious link.  Clicking the malicious link leads to a credential phishing kit that redirects the user to a legitimate login page.

Threat Alert: Phishing Attacks Abuse Proofpoint Branding

Cybercriminals have launched a series of phishing attacks using the threat of employee transfers and terminations as a lure. The phishing emails use the subject line "Annual Transfer list & Terminated Employees.”While the email from field says it is from “Human Resources Management Section,” the sending address is a Gmail account. The phishing emails contain a legitimate Dropbox link purporting to lead to a document outlining employee transfers or terminations.