Student Services and Support

Business Continuity and Staff Support

Campus Access

UMBC Together

Student Services and Support

Campus Access

UMBC Together

According to an article at https://www.infosecurity-magazine.com,  Abnormal Security recently discovered a new phishing campaign using malicious emails from a legitimate SurveyMonkey domain. A malicious actor is using this legitimate domain because it allows them to bypass most security filters. 

Even though these emails are sent from the actual SurveyMonkey domain, the reply-to address is in a different domain. Within the email there is a hidden URL that appears as the text ‘Navigate to access statement’ with a message ‘Please do not forward this email as its survey link is unique to you.’”

Clicking on the link will redirect the user to a form asking for their Office 365 credentials such as email address and password. If the user’s information is entered into this malicious site, then the user’s account will be compromised.

The article states that the reason this attack is so effective is due to the use of a legitimate email sender, as well as concealing the malicious site URL and the description of the email being “unique” to every user.

If you do receive any email that you suspect is a scam, please do not click on any URL or reply. Either of those actions confirms to the sender that your email address is valid. Please forward the message (with the email headers) to security@umbc.edu and delete the message.

How do I forward full email headers?

https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970

For more information, please check out: 

https://www.infosecurity-magazine.com/news/surveymonkey-phishers-office-365/

https://abnormalsecurity.com/blog/abnormal-attack-stories-phishing-through-surveymonkey/

To read more articles published by DOIT visit: 

https://itsecurity.umbc.edu/critical/?tag=notice. 

A new wave of Spear-phishing emails hit roughly 300 UMBC inboxes this weekend. An example is shown below, with the From field altered and the To field removed for privacy. There is no body in this particular email.

From: Forged Name <name@gmail.com>

Date: Sat, Jul 25, 2020 at 9:26 AM

Subject: Send me your available text number?

To:

This malicious email uses the name of a UMBC staffer in an attempt to appear credible. However, the Gmail address, unnatural-sounding subject line, and lack of body content are all clear red flags. More generally, be wary of emails from unverified sources with any urgent but unexplained request. Similar emails that were reported previously were precursors to gift card scams.

The best way to avoid these scams is to simply not respond. Instead, report suspicious emails by forwarding them to security@umbc.edu. Include the full email headers by following the instructions athttps://wiki.umbc.edu/pages/viewpage.action?pageId=1867970.

For more information on scams and phishing, please visit https://wiki.umbc.edu/pages/viewpage.action?pageId=36766495.

Jobs phishing Alert: Corestaff

During the past week, DOIT has received several notifications of phishing emails impersonating Corestaff. Below is a sample message that was sent to many UMBC students. The To field was removed for privacy purposes.

From: Corestaff Services <corestaffserviceshr@gmail.com>

Date: Wed, Jul 22, 2020 at 7:42 PM

Subject: JOB DESCRIPTION

Dear applicant,

Thanks for getting back to us with your interest in the job position, CORESTAFF SERVICES Inc® is a privately held company within Allegis Group, the largest private talent management firm in the world. Our long-standing history and industry-leading position speak to our success in providing the IT staffing solutions, IT services, and talent management insight required for our clients to actualize ROI and sustain a truly competitive advantage in a fast-changing market. We have established successful relationships with thousands of companies, government agencies, and small entrepreneurial firms across all industries. 

COMMITMENT: Our commitment to meeting our customers’ and consultants’ expectations is the foundation for building trust in our business relationships. Simply put, we foster an environment that demands integrity and accountability for results. To ensure our clients and consultants know exactly what they can expect from us, we make it our mission to hire smart, honest, and hardworking individuals who possess a great deal of pride in setting the bar high and keeping their word.

JOB DESCRIPTION: CORESTAFF SERVICES Inc® is seeking a production support analyst to support our client's production environment. This person will be responsible for analyzing, reporting, and ordering production supplies. This is a remote part-time job that does not deter you from doing any other. You just need a few hours of your time to do this weekly and you can have your own part of the work completed in t your leisure time in school or at home.

SALARY/WAGES: $300 Weekly.

The successful candidate will need to be able to: 

- Provide Quality communication etiquette skills and good organizational skills.

- Perform duties with accuracy, quality, and integrity.

We will always email you guidelines and instructions to follow in getting your job done perfectly as soon as you start working. if you care to proceed with the job offer, get back to us with the information listed below so we can process your information as to consider it valid to commence working with us.

NAME:

PHYSICAL CONTACT ADDRESS (PREFERRED MAILING ADDR)

CITY:

STATE:

ZIPCODE:

D.O.B:

GENDER:

MOBILE (Must be able to receive text): 

PERSONAL EMAIL:

CURRENT JOB:

We shall be contacting you as soon as we receive and validate this information.

Kind Regards,

Jasmine Orozco

HR Recruiting Dept.

Corestaff Services Inc®

From addresses of Corestaff impersonator emails that we have received are listed below

• Corestaff Services <corestaffserviceshr@gmail.com>

• CORESTAFF SERVICES Inc® <corestaff@consultant.com> 

 If you have received any message similar to the one listed above, DO NOT RESPOND. Please forward the message to  security@umbc.edu. Please attach the email headers, information on how to find the email headers can be found here: https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970

We have also received notification that students who have responded to this email have received checks. DO NOT DEPOSIT THE CHECKS, they are fake.

Students have also been asked for their Cash App, and other card information. DON’T SEND YOUR FINANCIAL INFORMATION. Listed below is a sample message from the impersonator asking for your financial information. For privacy purposes, the To field, and victim’s name have been removed.

From: CORESTAFF SERVICES Inc® <corestaff@consultant.com>

Date: Mon, Jul 27, 2020 at 11:54 AM

Subject: Further Information Required

Hello <VICTIM NAME> , 

I hope you are having a good day?

Our external financial institution is in the process of adding your information to the payroll system where they will be sending funds for you to complete your weekly tasks/orders and your ($300) weekly earnings via Cash-app simply because it is fast (lets you get paid early), safe and reliable and it can be used anywhere Visa is accepted, both online and in stores.

So, do you have Cash-app? Has it been verified? Do you have a cash-card too?

If yes, kindly send in the details below to make us proceed.

Account #

Routine #

If you don't have Cash-app, kindly set it up, verify it, and order a cash-card as soon as you can today. It's free/

I await your prompt response.

Devon Baynard 

Sr. Recruiting & Account Manager

Corestaff Services Inc®

 If you have received any message similar to the one listed above, DO NOT RESPOND. Please forward the message to  security@umbc.edu. Please attach the email headers, information on how to find the email headers can be found here: https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970

 By refusing to provide your financial information or depositing the checks, you might receive threats similar to the one listed below.

This threatening tone is often used by Scammers to strike fear into individuals which will often cause them to fall victim to scams. If you have received any threats, please send the screenshot to security@umbc.edu. 

More information on other job scams can be found here: https://itsecurity.umbc.edu/critical/?tag=notice

For more information on scams and phishing handling, please visit

https://wiki.umbc.edu/pages/viewpage.action?pageId=36766495 

For more information on how to spot a Scam, please visit

https://itsecurity.umbc.edu/critical/?id=94345

https://itsecurity.umbc.edu/critical/?id=93891

UMBC continues to receive phishing email campaigns from a malicious actor pretending to be from either Cisco or Corestaff. This phishing email has the goal of not only getting users personal information but also to try and get them to cash a fraudulent check. An example of the email can be seen below:

If the user responds to the initial message the malicious actor will then respond asking the user for more personal information like name, address, city, state, Zip code, date of birth, gender, phone number, personal email and current job. Which can be seen in the below:

If the user responds with their personal information the scammer will then inform the user that they have been accepted to the job, but due to Covid-19 they cannot do a one-on-one interview. They inform that a check will arrive with enough to cover your wage and your first task.

If you do receive this or a similar scam, please DO NOT respond any further. If you have provided any banking or financial information, please notify your bank or financial institution immediately. If you have been sent a check, you should not attempt to cash or deposit it. If you have deposited a check already, please contact your bank and tell them that it may be part of a scam.

Once you stop cooperating with the scam, you may receive a text message from the scammers.  It may look something like:

This is part of the scam and seems to be intended to scare you.  The real Cisco Systems doesn’t threaten legal action through text messaging and can afford to employ people who write grammatical sentences.

If you did receive this or any other email that you suspect is a scam, please do not click on any URL or reply. Either of those actions confirms to the sender that your email address is valid. Whether or not you responded to the scam, please forward the message (with the email headers) to security@umbc.edu.  We will also keep track of any other information you submit about the scammers, such as phone numbers if you get a text message.

How do I forward full email headers?

https://wiki.umbc.edu/pages/viewpage.action?pageId=1867970

To read more tips on how to spot and avoid phishing scams:

https://itsecurity.umbc.edu/critical/?id=93891

https://itsecurity.umbc.edu/critical/?id=93743

To read more articles published by DOIT visit: 

https://itsecurity.umbc.edu/critical/?tag=notice. 

https://itsecurity.umbc.edu/home/covid-19-news/?tag=covid19

SINGLE CARROT THEATRE SEEKS STAGE MANAGER AND ASSISTANT STAGE MANAGER FOR UPCOMING PRODUCTION.

U.S. Navy Lieutenant Meghan Grenier joined the UMBC faculty as a clinical assistant professor in the Naval Reserve Officer Training Corps (NROTC) program in 2018. In two years, she has already left her mark on the program and its students. Now, she’s received national recognition for work with UMBC’s NROTC midshipmen.

“With her unlimited enthusiasm, upbeat attitude, expertise, and strong dedication to the Naval ROTC mission, she is an ideal role model for her students and peers alike,” says U.S. Navy Captain Troy Mong, professor of naval science and the commanding officer for UMBC NROTC. “Her superb mentorship and very involved academic advising of our midshipmen has enabled our students to excel in their leadership development and academic performance.”

U.S. Navy Lieutenant Meghan Grenier. Photo courtesy Meghan Grenier.

Mong isn’t the only one who noticed Grenier’s commitment to the Navy and her students. This spring, the Naval Education and Training Command selected Grenier as the NROTC Instructor of the Year out of all NROTC instructors across the U.S.

In further recognition of Grenier’s leadership skill and potential, she recently took on a competitive flag aide position for Rear Admiral Doug Vermissimo, the commander of Carrier Strike Group Nine, a group of naval vessels stationed out of San Diego, CA. Flag aides work directly with an admiral and help manage their affairs while becoming more familiar with the leadership structure and duties in the Navy. These challenging positions are designed for junior officers with outstanding performance records.  

Training the Navy’s next leaders

The UMBC NROTC program was founded in 2015 as the first in the state of Maryland. It is part of the Maryland NROTC consortium, which also includes the University of Maryland, College Park. The program graduated its first students in May 2019, and they were commissioned as officers in the U.S. Navy the day after commencement.

“I am very appreciative of the opportunity to instruct the future Navy and Marine Corps officers here at the Maryland NROTC program. They are an impressive group of individuals who will go on to serve as excellent Navy and Marine Corps officers,” Grenier says. “I hope what they have learned from me and the NROTC program will enable them to find success out in the fleet and prepare them for the challenges of leadership in our Navy.”

Mong is certain she will accomplish just that. “Megan has had a significant impact in training and developing our midshipmen into the next generation of future naval officers who will lead well from their first days in the fleet.”

Banner image: UMBC NROTC inductees in 2016 with UMBC President Freeman Hrabowski (center), Rear Admiral Stephen Evans (center right), and UMBC NROTC faculty members Captain Troy Mong (center left), Lieutenant John O’Brien (third to left from center), Commander Stew Wennersten (front row, third from center on right), and Lieutenant Michael Tenaglia (front row, far left). Photo by Marlayna Demond ’11 for UMBC.

Hello Mosaic, Interfaith, and Pride Center Community members,

As of July 1, 2020 Retriever Immigrants United became inactive as a student organization.However, we acknowledge the importance of supporting our fellow immigrant community members and wish to continue the good work set by previous RIU student leaders. 

We are delighted to announce that starting Fall 2020, RIU will transition over to The Mosaic, Interfaith, and Pride Centers as an ongoing discussion and support group self-identified immigrant students, as well as staff, faculty, and alumni. We are excited to see what new opportunities and connections this new iteration of RIU will bring to the UMBC immigrant community. Please note that this group is centers those who self-identify as first, 1.5, or second-generation immigrants regardless of race, ethnicity, nationality, or citizenship status. This is subject to change according to attendees and potential event opportunities and initiatives. See below for a list of definitions. 

As members of this page we encourage you to follow The Mosaic, Interfaith, and Pride Centers myUMBC group page to stay up to date with upcoming RIU discussion topics. Our current sessions are scheduled for 10/15/2020 (Link) and 12/15/2020 (Link).

The RIU myUMBC group page may become inactive in the following months. If you have any questions, please do not hesitate to reach out to former RIU Advisor, Carlos Turcios at carlos6@umbc.edu. 

In solidarity, 

• Carlos Turcios | Coordinator for Student Diversity and Inclusion | Former RIU Staff Advisor
• Sofia Encarnacion | Mosaic Student Diversity and Inclusion Peer | Former RIU Vice-President | sencarn1@umbc.edu