{"id":92916,"date":"2022-10-30T16:26:00","date_gmt":"2022-10-30T21:26:00","guid":{"rendered":"https:\/\/www.unmc.edu\/newsroom\/?p=92916"},"modified":"2022-10-30T16:50:18","modified_gmt":"2022-10-30T21:50:18","slug":"be-aware-of-a-new-phishing-scheme","status":"publish","type":"post","link":"https:\/\/www.unmc.edu\/newsroom\/2022\/10\/30\/be-aware-of-a-new-phishing-scheme\/","title":{"rendered":"Be aware of a new phishing scheme"},"content":{"rendered":"
\n

UNMC and Nebraska Medicine personnel and students should be aware of a new phishing attack that several colleagues already have encountered.<\/p>\n\n\n\n

Users were contacted by an external sender about a potential job opening at the medical center and clicked on a link. The sender then somehow was able to obtain the username and password of the recipients.<\/p>\n\n\n\n

When the med center colleague was prompted for DUO, they \u201caccepted\u201d the prompt and let the outside intruder into their email account. The intruder created some rules in the colleague\u2019s inbox to disguise their actions, and they then sent out a blast of internal emails to get more people to contact them.<\/p>\n\n\n\n

Currently, the attacks include \u201cAdministrative Assistant Remote Job\u201d in the subject line and are addressed to individuals. The e-mail includes faculty or staff member photos and can appear to be from a UNMC staff member. <\/p>\n\n\n\n

\u201cUNMC and Nebraska Medicine would never solicit contract labor like this,\u201d said Lisa Bazis, the medical center\u2019s chief information security officer.<\/p>\n\n\n\n

She pointed to several rules that will protect colleagues who may be the victims of a phishing attempt.<\/p>\n\n\n\n