UCSF IT Technology

Cybercriminals have launched phishing attacks abusing legitimate tools that are used to direct web traffic.  Phishing lures contain an embedded URL that leads to a lookalike Google Chrome update site.  Downloading the fake Google Chrome update installs a legitimate tool used for remotely monitoring and supporting computers.

Every year, as the holiday shopping season approaches, holiday-themed phishing attacks rise. Attackers know the season brings a high volume of ecommerce activity—and related notifications.

Cybercriminals have launched a series of phishing attacks using spoofed or compromised email accounts belonging to the National Health Service (NHS). These emails, which appear to come from a NHS[.]net email address, use the subject line “YOU NEED TO SETTLE THIS.” A fully capitalized subject line like this is unlikely to come from an official government institution.   The lures contain a prompt to review an alleged DocuSign document.

Cybercriminals have launched a series of phishing attacks against individuals in the UK impersonating the recruitment company Michael Page. These attacks are designed to spread malicious software (malware) to unsuspecting recipients.The emails commonly use job-themed lures to convince targeted individuals to click links to view and download a job description.Clicking the link leads to a lookalike Michael Page landing page, which encourages individuals to download a job description.