The email that appears to be from “Dension.edu” with the subject of “Your Dension account Certificate expired on the 18-04-2016” and a message in the email body that asks to to “re-new your webmail Certificate” is a scam. Please do not click on the link in the message. The message is not from Denison. It is another fraudulent attempt (aka phishing attack) to gather your username and password.

If you are using Denison Apps Mail:

Open the message and click the down arrow beside the Reply button and select “Report phishing” in the menu that appears. (Note: if “Report phishing” does not appear as an option and “Report not phishing” appears instead then the message is already flagged as phishing.)

This reports the phishing attack to Google and improves the identification and blocking of future phishing attacks. After you report it, please delete the message.

NOTE: this option is only available in the web (Gmail) interface for Denison Apps. It is not available if you are using Thunderbird, Apple Mail, or another client to access your Denison Apps email.

Please DO NOT RESPOND to or click links in this or any emails that request computer account or other personal information. They are an attempt to steal, at minimum, your email or other computer account, at maximum, your identity.

If you replied to it in any fashion, please visit the ITS Help Desk Online FAQ about what to do if you suspect your account may be compromised and follow all the steps listed:

http://apps.denison.edu/helpdesk/faq3422

Please contact the ITS Help Desk at helpdesk@denison.edu or 740-587-6395 if you have any questions or concerns.

Please be aware of these warnings from the IRS concerning phishing and malware this tax season:

https://www.irs.gov/uac/Newsroom/Consumers-Warned-of-New-Surge-in-IRS-Email-Schemes-during-2016-Tax-Season-Tax-Industry-Also-Targeted

https://www.irs.gov/uac/Dont-be-Fooled-IRS-Scams-Continue-to-Pose-Serious-Threat

April edition:

I’m Hacked, Now What?

(http://securingthehuman.sans.org/newsletters/ouch/issues/OUCH-201604_en.pdf)

OUCH! is the world’s leading, free security awareness newsletter designed for the common computer user. Published every month and in multiple languages, each edition is carefully researched and developed by the SANS Securing The Human team, SANS instructor subject matter experts and team members of the community. Each issue focuses on and explains a specific topic and actionable steps people can take to protect themselves, their family and their organization.

This morning, ITS noted another variant on scam emails. The message appears to be from “copier@denison.edu” and says “Your message is ready to be sent with the following file or link attachments:”. It has a “JPEG” attachment.

This message is not from Denison and likely contains malware. It is another fraudulent attempt to infect your computer.

If you are using Denison Apps Mail:

Open the message and click the down arrow beside the Reply button and select “Report phishing” in the menu that appears. (Note: if “Report phishing” does not appear as an option and “Report not phishing” appears instead then the message is already flagged as phishing.)

This reports the phishing attack to Google and improves the identification and blocking of future phishing attacks. After you report it, please delete the message.

NOTE: this option is only available in the web (Gmail) interface for Denison Apps. It is not available if you are using Thunderbird, Apple Mail, or another client to access your Denison Apps email.

Please DO NOT RESPOND to or click links in this or any emails that request computer account or other personal information. They are an attempt to steal, at minimum, your email or other computer account, at maximum, your identity.

If you opened the attachment, please contact the ITS Help Desk at helpdesk@denison.edu or 740-587-6395 to have your computer checked for malware.