{"id":387,"date":"2021-04-22T11:20:33","date_gmt":"2021-04-22T15:20:33","guid":{"rendered":"https:\/\/dev.is.wfu.edu\/infosec\/?p=387"},"modified":"2021-09-27T17:23:20","modified_gmt":"2021-09-27T21:23:20","slug":"icedid-malware-phishing-scams-submitted-through-departmental-contact-us-forms","status":"publish","type":"post","link":"https:\/\/dev.is.wfu.edu\/infosec\/icedid-malware-phishing-scams-submitted-through-departmental-contact-us-forms\/","title":{"rendered":"IcedID Malware phishing scams submitted through departmental \u201cContact Us\u201d forms"},"content":{"rendered":"\n<p>There has been an uptick in reports of phishing scams submitted within \u201cContact Us\u201d forms and questionnaires designed for comments and feedback on departmental websites.<\/p>\n\n\n\n<p><strong>Recent phishing scams of this nature include:<\/strong><\/p>\n\n\n\n<ul><li>An urgent and intimidating message about \u201ccopyrighted\u201d material on your website, with the sender often claiming to be a \u201ccertified photographer\u201d who owns the copyright<\/li><li>Instructions to click on a link to view the supposed copyrighted images<\/li><li>A threat of legal action if you do not respond<\/li><\/ul>\n\n\n\n<!--more-->\n\n\n\n<p><strong>Do not become a phishing victim:&nbsp;<\/strong><\/p>\n\n\n\n<ul><li><strong>Do not respond or click on a link in these types of fake messages. <\/strong>They are trying to get you to click on the link in order to infect your computer with malware called \u201cIcedID\u201d. These scams are particularly dangerous because the malware they contain can be spread to other devices on our network.&nbsp;<\/li><li><strong>Never enter your credentials. <\/strong>The links in these scams often direct people to a \u201csites.google\u201d webpage where they \u201cneed\u201d to enter their username and password in order to view the supposed copyrighted images, however, as soon as the credentials have been entered, a ZIP file of IcedID malware begins automatically downloading to the device.&nbsp;<\/li><li>If you are unsure about the content or validity of a message, <strong>do not respond<\/strong> to it. Forward the email to the Information Systems Security Team at <a href=\"mailto:infosec@wfu.edu\">infosec@wfu.edu<\/a> for further analysis.<strong>&nbsp;<\/strong><\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>There has been an uptick in reports of phishing scams submitted within \u201cContact Us\u201d forms and questionnaires designed for comments and feedback on departmental websites. Recent phishing scams of this nature include: An urgent and intimidating message about \u201ccopyrighted\u201d material on your website, with the sender often claiming to be a \u201ccertified photographer\u201d who owns&hellip;&NewLine;<a href=\"https:\/\/dev.is.wfu.edu\/infosec\/icedid-malware-phishing-scams-submitted-through-departmental-contact-us-forms\/\" title=\"Read more on IcedID Malware phishing scams submitted through departmental \u201cContact Us\u201d forms\">Read More &raquo;<\/a><\/p>\n","protected":false},"author":1306,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":true,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3,10],"tags":[],"acf":[],"_links":{"self":[{"href":"https:\/\/dev.is.wfu.edu\/infosec\/wp-json\/wp\/v2\/posts\/387"}],"collection":[{"href":"https:\/\/dev.is.wfu.edu\/infosec\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dev.is.wfu.edu\/infosec\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dev.is.wfu.edu\/infosec\/wp-json\/wp\/v2\/users\/1306"}],"replies":[{"embeddable":true,"href":"https:\/\/dev.is.wfu.edu\/infosec\/wp-json\/wp\/v2\/comments?post=387"}],"version-history":[{"count":1,"href":"https:\/\/dev.is.wfu.edu\/infosec\/wp-json\/wp\/v2\/posts\/387\/revisions"}],"predecessor-version":[{"id":388,"href":"https:\/\/dev.is.wfu.edu\/infosec\/wp-json\/wp\/v2\/posts\/387\/revisions\/388"}],"wp:attachment":[{"href":"https:\/\/dev.is.wfu.edu\/infosec\/wp-json\/wp\/v2\/media?parent=387"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dev.is.wfu.edu\/infosec\/wp-json\/wp\/v2\/categories?post=387"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dev.is.wfu.edu\/infosec\/wp-json\/wp\/v2\/tags?post=387"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}