{"id":5013,"date":"2016-03-11T12:03:31","date_gmt":"2016-03-11T12:03:31","guid":{"rendered":"http:\/\/blogs-new.it.ox.ac.uk\/adamweblearn\/?p=5013"},"modified":"2016-03-11T13:33:24","modified_gmt":"2016-03-11T13:33:24","slug":"weblearn-phishing-excercise-please-warn-your-staff","status":"publish","type":"post","link":"https:\/\/blogs-new.it.ox.ac.uk\/adamweblearn\/2016\/03\/weblearn-phishing-excercise-please-warn-your-staff\/","title":{"rendered":"WebLearn Phishing Excercise &#8211; Please Warn Your Staff"},"content":{"rendered":"<p><a href=\"https:\/\/www.flickr.com\/photos\/laurelrusswurm\/12395604404\/\"><img loading=\"lazy\" decoding=\"async\" class=\"alignright size-medium wp-image-4355\" alt=\"Fish: https:\/\/www.flickr.com\/photos\/laurelrusswurm\/12395604404\/\" src=\"http:\/\/blogs-new.it.ox.ac.uk\/adamweblearn\/files\/2015\/10\/phish-300x185.png\" width=\"300\" height=\"185\" srcset=\"https:\/\/blogs-new.it.ox.ac.uk\/adamweblearn\/files\/2015\/10\/phish-300x185.png 300w, https:\/\/blogs-new.it.ox.ac.uk\/adamweblearn\/files\/2015\/10\/phish.png 400w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a>Quite a few people have received a message (given below) about the need to reactivate an expiring WebLearn account. The link goes to a spoofed copy of the &#8220;WebAUTH&#8221; login page which looks quite convincing<\/p>\n<p><strong>I would like to assure you that this is NOT a legitimate message: users should NOT click or follow the link.<\/strong><\/p>\n<p>I have reported this to OxCERT but I would appreciate it if you could spread the word amongst staff and students that they should ignore this and any other similar messages.<\/p>\n<p>That message again:<\/p>\n<p><em><b>Subject: <\/b> Expiration Notice<\/em><\/p>\n<p><em>Dear User,<\/em><\/p>\n<p><em> This message is to inform you that your access to the WebLearn will soon expire. You will have to login to your account to continue to have access to this service.<\/em><br \/>\n<em> You need to reactivate it just by logging in through the following URL. A successful login will activate your account and you will be redirected to your WebLearn page.<\/em><\/p>\n<p><span style=\"text-decoration: underline;color: #3366ff\"><em> http:\/\/weblearn.ox.ac.raae.cf\/portal\/login2RT2VuKZn[&#8230;&#8230;.]\/<\/em><\/span><\/p>\n<p><em> If you are not able to login, please contact Fred Bloggs [&#8230;]\u00a0\u00a0for immediate assistance.<\/em><\/p>\n<p><em> Sincerely,<\/em><\/p>\n<p><em> Fred Bloggs<\/em><br \/>\n<em> IT Services<\/em><br \/>\n<em> University of Oxford<\/em><em><a href=\"mailto:john.rosic@bodleian.ox.ac.uk\"><br \/>\n<\/a><\/em><\/p>\n<p>For more information please visit:\u00a0<a href=\"https:\/\/www.infosec.ox.ac.uk\/current-alert\/weblearn-phishing-e-mails\">https:\/\/www.infosec.ox.ac.uk\/current-alert\/weblearn-phishing-e-mails<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Quite a few people have received a message (given below) about the need to reactivate an expiring WebLearn account. The link goes to a spoofed copy of the &#8220;WebAUTH&#8221; login page which looks quite convincing I would like to assure &hellip; <a href=\"https:\/\/blogs-new.it.ox.ac.uk\/adamweblearn\/2016\/03\/weblearn-phishing-excercise-please-warn-your-staff\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":13,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[105],"tags":[],"class_list":["post-5013","post","type-post","status-publish","format-standard","hentry","category-weblearn"],"_links":{"self":[{"href":"https:\/\/blogs-new.it.ox.ac.uk\/adamweblearn\/wp-json\/wp\/v2\/posts\/5013","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs-new.it.ox.ac.uk\/adamweblearn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs-new.it.ox.ac.uk\/adamweblearn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs-new.it.ox.ac.uk\/adamweblearn\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs-new.it.ox.ac.uk\/adamweblearn\/wp-json\/wp\/v2\/comments?post=5013"}],"version-history":[{"count":7,"href":"https:\/\/blogs-new.it.ox.ac.uk\/adamweblearn\/wp-json\/wp\/v2\/posts\/5013\/revisions"}],"predecessor-version":[{"id":5021,"href":"https:\/\/blogs-new.it.ox.ac.uk\/adamweblearn\/wp-json\/wp\/v2\/posts\/5013\/revisions\/5021"}],"wp:attachment":[{"href":"https:\/\/blogs-new.it.ox.ac.uk\/adamweblearn\/wp-json\/wp\/v2\/media?parent=5013"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs-new.it.ox.ac.uk\/adamweblearn\/wp-json\/wp\/v2\/categories?post=5013"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs-new.it.ox.ac.uk\/adamweblearn\/wp-json\/wp\/v2\/tags?post=5013"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}