{"id":4353,"date":"2015-10-27T14:52:41","date_gmt":"2015-10-27T14:52:41","guid":{"rendered":"http:\/\/blogs-new.it.ox.ac.uk\/adamweblearn\/?p=4353"},"modified":"2015-10-30T16:41:31","modified_gmt":"2015-10-30T16:41:31","slug":"weblearn-phising-attack-of-sorts","status":"publish","type":"post","link":"https:\/\/blogs-new.it.ox.ac.uk\/adamweblearn\/2015\/10\/weblearn-phising-attack-of-sorts\/","title":{"rendered":"WebLearn Phishing Attack (of sorts)"},"content":{"rendered":"

\"Fish:<\/a>Quite a few people have received a strange message (given below) about the need to reactivate an expiring WebLearn account.<\/p>\n

I would like to assure you that this is NOT a legitimate message: users should NOT click or follow the link.<\/strong><\/p>\n

I have reported this to OxCERT but I would appreciate it if you could spread the word amongst staff and students that they should ignore this and any other similar messages.<\/p>\n

By looking at the logs, we can see that quite a few people have already clicked on the link.<\/p>\n

That message again:<\/p>\n

From: IT Services [mailto:nsms@it.ox.ac.uk<\/a>]<\/em>
\n Sent: 26 October 2015 12:58<\/em>
\n To: XXXXXXXXXXXx<\/em>
\n Subject: Access Services Manager<\/em><\/p>\n

Dear User,<\/em><\/p>\n

Your access to The WebLearn is expiring soon due to inactivity. To continue to have access to this service, you must reactivate your account. For this purpose, click the web address below or copy and paste it into your web browser. A successful login will activate your account and you will be redirected to your WebLearn page.<\/em><\/p>\n

http:\/\/weblearn.ox.ac.uk\/loginRT=VizM%252FcqMG4bNs5zysB1Y6aKSdGGBhb07dkVAkyaDVP6qhQ%253D%23b\/webauth.ox.ac.uk\/loginde86.html<\/a><\/em><\/p>\n

If you are not able to login, please contact the service desk for immediate assistance.<\/em><\/p>\n

Sincerely,<\/em><\/p>\n

Access Services Manager<\/em>
\n Computing Services and Systems Development<\/em>
\n University of Oxford<\/em>
\n 13 Banbury Road, Oxford, OX2 6NN<\/em>
\n tel: (+44) 1865 612345<\/em><\/p>\n

<mailto:paul.watne@vu.edu.au><\/a><\/em><\/p>\n

[Image removed by sender. Powered by Hairyspire]<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

Quite a few people have received a strange message (given below) about the need to reactivate an expiring WebLearn account. I would like to assure you that this is NOT a legitimate message: users should NOT click or follow the … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":13,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[105],"tags":[382],"class_list":["post-4353","post","type-post","status-publish","format-standard","hentry","category-weblearn","tag-security"],"_links":{"self":[{"href":"https:\/\/blogs-new.it.ox.ac.uk\/adamweblearn\/wp-json\/wp\/v2\/posts\/4353","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs-new.it.ox.ac.uk\/adamweblearn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs-new.it.ox.ac.uk\/adamweblearn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs-new.it.ox.ac.uk\/adamweblearn\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs-new.it.ox.ac.uk\/adamweblearn\/wp-json\/wp\/v2\/comments?post=4353"}],"version-history":[{"count":3,"href":"https:\/\/blogs-new.it.ox.ac.uk\/adamweblearn\/wp-json\/wp\/v2\/posts\/4353\/revisions"}],"predecessor-version":[{"id":4383,"href":"https:\/\/blogs-new.it.ox.ac.uk\/adamweblearn\/wp-json\/wp\/v2\/posts\/4353\/revisions\/4383"}],"wp:attachment":[{"href":"https:\/\/blogs-new.it.ox.ac.uk\/adamweblearn\/wp-json\/wp\/v2\/media?parent=4353"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs-new.it.ox.ac.uk\/adamweblearn\/wp-json\/wp\/v2\/categories?post=4353"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs-new.it.ox.ac.uk\/adamweblearn\/wp-json\/wp\/v2\/tags?post=4353"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}