News

All News

July 13, 2016

Remote Code Execution Vulnerabilities in Drupal 7 Third-party Modules
Highly critical remote code execution vulnerabilities have been announced by the Drupal security team for the third-party modules RESTWS, Coder, and Webform Multiple File Upload. Open Berkeley Drupal sites are NOT affected.

June 13, 2016

Apple Ends Support for Quicktime on Windows
Apple has announced that it will no longer support Quicktime on Windows. All users are advised to remove Quicktime on Windows machines as there are multiple zero-day, remote code execution vulnerabilities that Apple has announced they will not be patching.

May 23, 2016

Phishing Example: Vital Info
Hello, Please refer to the vital info I've shared with you using Google Drive. Click https://www.google.com/drive/docs/file0116 and sign in to view details.. Regard --

May 20, 2016

Phishing Example: bCourses Phish Attack
Dear User, This message is to inform you that your access to bCourses will soon expire. You will have to log in to your account to continue to have access to this service. You need to reactivate it just by logging in through the following URL. A a successful login will activate your account, and you will be redirected to your bCourses page. http://bcourses.berkeley.cnea.gq/login_0DZbL4B22o0ki22F0IZotK2LqgZijDXvf... If you are not able to login, please contact Mary Patel at mpatel@berkeley.edu for immediate assistance. Sincerely, Mary Patel Berkeley Security University of California, Berkeley 510-643-6927 mpatel@berkeley.edu

May 17, 2016

WARNING: Ransomware Attacks on the Rise

The US-CERT (US Computer Emergency Readiness Team) has issued a recent alert concerning ransomware.  Ransomware is a type of malicious software that infects a computer and restricts users’ access to it until a ransom is paid to unlock it.  The alert warns that in early 2016, destructive ransomware variants such as Locky and

May 10, 2016

Google Analytics and Changes to Our Privacy Policy
ISP has enabled Google Analytics so that we can better learn how people use our website. As a result, our privacy policy has been updated.

March 22, 2016

Phishing Example: PayPal - We need your help
We need your help. You account has been suspended, as an error as detected in your informations. The reason for the error is not certain, but for security reasons, we have suspended your account temporarily.

March 14, 2016

Phishing Example: RE: Notice from @rescue.org
A phishing message purporting to be from the International Rescue Committee regarding IT maintenance has been circulating on campus. The message requests that the recipient upgrade their mailbox size by selecting a link that redirects to a malicious website.

March 13, 2016

Phishing Example: Last Reminder You Must Update Your Apple Account Information!
Hello, We've noticed that some of your account information appears to be missing or incorrect, we need to verify your account information in order to continue using your Apple ID. Please Verify your account information by clicking on the link below. Sign in using your Apple ID to start the process, Verify Now >. Wondering why you got this email? When you don't regularly update your Apple ID information, Apple will require you to sign in by following the link in a verification email and update your information. This is to help protect your identity and keep your account secure. Apple Support

March 4, 2016

Phishing Example: Help Desk Notice
We detected unknown IP access on our date base computer system our security requires you to verify your account for secure security kindly Click Here and verify your account. ​ Help Desk​

February 22, 2016

Phishing Example: Google Docs Download
You have a pending incoming download docs shared with you via Google docs
Phishing Example: UCOP Spear Phish Attack
I need all our employee's reference copies of 2015 W-2 wages and tax statement, i am working on a review and if you can work on the W2's and have it sent to me as an attachment this morning that will be splendid. Via email would be appropriate. Regards. Janet Napolitano.

February 21, 2016

Phishing Example: ITunes Access Disabled
Another example of a common ploy to trick the recipient into clicking a link to a malicious website by claiming access to ITunes has been disabled.

February 9, 2016

Phishing Example: "Dear Email User" Expired Password Ploy
Your password will expire in 2 days, Click Here to re-change your password immediately. Thank you, IT- Help Desk SEED IS PROUD TO BE A 21st CENTURY COMMUNITY LEARNING CENTER. LEGAL DISCLAIMER - The information contained in this communication (including any attachments) may be confidential and legally privileged. This email may not serve as a contractual agreement unless explicit written agreement for this purpose has been made. If you are not the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication or any of its contents is strictly prohibited. If you have received this communication in error, please re-send this communication to the sender indicating that it was received in error and delete the original message and any copy of it from your computer system.

February 2, 2016

Phishing Example: IT-Service Help Desk "Password Update"
Password will expire in 2 days Click Here To Validate E-mail Thank you, IT-Service Help Desk

January 18, 2016

Phishing Example: U.S. Dept. of Labor "Record Update"
This is an urgent request to update your employment record at the U.S Department of Labor.

January 15, 2016

Phishing Example: DHL Express Document
Dear xxx@berkeley.edu Your parcel (shipping document) arrived at the post office. Here is your Shipping Document/Invoice and copy of DHL receipt for your tracking which includes the bill of lading and DHL tracking number, the new Import/Export policy supplied by DHL Express. Please kindly check the attached to confirm accordingly if your address is correct, before we submit to our outlet office for dispatch to your destination. Label Number: E727D5151D Class: Package Services Service(s): Delivery Confirmation Status: eNotification sent Find attached the full statement information and a full list of outstanding Invoices. Your item will arrive in two (2) days time, and within the agreed credit term as stated on your Invoice. We would like to thank you for using the services of DHL Express. Read the enclosed file for details.
Phishing Example: IRS Service "Important Update"
As we prepare to start the 2016 Tax filling season, we have undergone slight changes in the filling process to make filling for your refund easier and to prevent unnecessary delays. Part of the changes include updating our database with your information. Please ensure to carefully complete this verification to avoid hitches in processing your refund. We have sent you an attachment, open it and follow the steps to verify your profile.

January 6, 2016

Phishing Example: "Paperless W2"
Dear: Account Owner, Our records indicate that you are enrolled in the University of California paperless W2 Program. As a result, you do not receive a paper W2 but instead receive e-mail notification that your online W2 (i.e. "paperless W2") is prepared and ready for viewing. ​​ Your W2 is ready for viewing under Employee Self Service. Logon at the following link: Click Here to Logon If you have trouble logging in to Employee Self Service at the link above, please contact your Payroll Department for support. If you would like to un-enroll in the Paperless W2 Program, please logon to Employee Self Service at the link above and go to the W2 Delivery Choice webpage and follow the instructions.

January 2, 2016

Phishing Example: Spear Phishing Attack "Articles"
Dear Dr.