<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
        {font-family:Wingdings;
        panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
        {font-family:"Cambria Math";
        panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:"Fira Sans";
        panose-1:2 11 5 3 5 0 0 2 0 4;}
@font-face
        {font-family:"Segoe UI";
        panose-1:2 11 5 2 4 2 4 2 2 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        font-size:11.0pt;
        font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
        {mso-style-priority:34;
        margin-top:0in;
        margin-right:0in;
        margin-bottom:0in;
        margin-left:.5in;
        font-size:11.0pt;
        font-family:"Calibri",sans-serif;}
span.EmailStyle19
        {mso-style-type:personal-reply;
        font-family:"Fira Sans",sans-serif;
        color:windowtext;
        font-weight:normal;
        font-style:normal;
        text-decoration:none none;}
.MsoChpDefault
        {mso-style-type:export-only;
        font-family:"Calibri",sans-serif;}
@page WordSection1
        {size:8.5in 11.0in;
        margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
        {page:WordSection1;}
/* List Definitions */
@list l0
        {mso-list-id:139424101;
        mso-list-template-ids:604547486;}
@list l0:level1
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l0:level2
        {mso-level-number-format:bullet;
        mso-level-text:o;
        mso-level-tab-stop:1.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:"Courier New";
        mso-bidi-font-family:"Times New Roman";}
@list l0:level3
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:1.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Wingdings;}
@list l0:level4
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:2.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Wingdings;}
@list l0:level5
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:2.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Wingdings;}
@list l0:level6
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:3.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Wingdings;}
@list l0:level7
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:3.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Wingdings;}
@list l0:level8
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:4.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Wingdings;}
@list l0:level9
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:4.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Wingdings;}
@list l1
        {mso-list-id:761413121;
        mso-list-template-ids:-510654246;}
@list l1:level1
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l1:level2
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:1.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l1:level3
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:1.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l1:level4
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:2.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l1:level5
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:2.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l1:level6
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:3.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l1:level7
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:3.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l1:level8
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:4.0in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l1:level9
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:4.5in;
        mso-level-number-position:left;
        text-indent:-.25in;
        mso-ansi-font-size:10.0pt;
        font-family:Symbol;}
@list l2
        {mso-list-id:1722317367;
        mso-list-type:hybrid;
        mso-list-template-ids:-1010898200 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l2:level1
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;
        font-family:Symbol;}
@list l2:level2
        {mso-level-number-format:bullet;
        mso-level-text:o;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;
        font-family:"Courier New";}
@list l2:level3
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;
        font-family:Wingdings;}
@list l2:level4
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;
        font-family:Symbol;}
@list l2:level5
        {mso-level-number-format:bullet;
        mso-level-text:o;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;
        font-family:"Courier New";}
@list l2:level6
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;
        font-family:Wingdings;}
@list l2:level7
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;
        font-family:Symbol;}
@list l2:level8
        {mso-level-number-format:bullet;
        mso-level-text:o;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;
        font-family:"Courier New";}
@list l2:level9
        {mso-level-number-format:bullet;
        mso-level-text:;
        mso-level-tab-stop:none;
        mso-level-number-position:left;
        text-indent:-.25in;
        font-family:Wingdings;}
ol
        {margin-bottom:0in;}
ul
        {margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1027" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Fira Sans",sans-serif">Hello Entomologists,
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Fira Sans",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Fira Sans",sans-serif">Please see the below e-mail from Concur regarding a warning about potential phishing attempts with Concur e-mails:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Fira Sans",sans-serif"><o:p> </o:p></span></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph" style="margin-left:0in;mso-list:l2 level1 lfo3"><span style="font-size:12.0pt;font-family:"Fira Sans",sans-serif">Here is a direct link to sign into Concur:
<a href="https://us2.concursolutions.com/nui/signin">https://us2.concursolutions.com/nui/signin</a><o:p></o:p></span></li><li class="MsoListParagraph" style="margin-left:0in;mso-list:l2 level1 lfo3"><span style="font-size:12.0pt;font-family:"Fira Sans",sans-serif">And to R’Space, it should also be located under the “Authorized Apps” tab:
<a href="https://portal.ucr.edu/">https://portal.ucr.edu</a><o:p></o:p></span></li></ul>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Fira Sans",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Fira Sans",sans-serif">Please let me know if you have any questions.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Fira Sans",sans-serif"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Fira Sans",sans-serif">Thank you,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Fira Sans",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><!--[if gte vml 1]><v:shapetype id="_x0000_t75" coordsize="21600,21600" o:spt="75" o:preferrelative="t" path="m@4@5l@4@11@9@11@9@5xe" filled="f" stroked="f">
<v:stroke joinstyle="miter" />
<v:formulas>
<v:f eqn="if lineDrawn pixelLineWidth 0" />
<v:f eqn="sum @0 1 0" />
<v:f eqn="sum 0 0 @1" />
<v:f eqn="prod @2 1 2" />
<v:f eqn="prod @3 21600 pixelWidth" />
<v:f eqn="prod @3 21600 pixelHeight" />
<v:f eqn="sum @0 0 1" />
<v:f eqn="prod @6 1 2" />
<v:f eqn="prod @7 21600 pixelWidth" />
<v:f eqn="sum @8 21600 0" />
<v:f eqn="prod @7 21600 pixelHeight" />
<v:f eqn="sum @10 21600 0" />
</v:formulas>
<v:path o:extrusionok="f" gradientshapeok="t" o:connecttype="rect" />
<o:lock v:ext="edit" aspectratio="t" />
</v:shapetype><v:shape id="Graphic_x0020_1" o:spid="_x0000_s1026" type="#_x0000_t75" alt="Grasshopper with solid fill" style='position:absolute;margin-left:0;margin-top:0;width:33.05pt;height:33.05pt;z-index:251659264;visibility:visible;mso-wrap-style:square;mso-width-percent:0;mso-height-percent:0;mso-wrap-distance-left:9pt;mso-wrap-distance-top:0;mso-wrap-distance-right:9pt;mso-wrap-distance-bottom:0;mso-position-horizontal:left;mso-position-horizontal-relative:margin;mso-position-vertical:top;mso-position-vertical-relative:margin;mso-width-percent:0;mso-height-percent:0;mso-width-relative:page;mso-height-relative:page'>
<v:imagedata src="cid:image001.png@01D93D2D.CBE53880" o:title="Grasshopper with solid fill" croptop="-3194f" cropbottom="-4075f" cropleft="-2058f" cropright="-4008f" />
<w:wrap type="square" anchorx="margin" anchory="margin"/>
</v:shape><![endif]--><![if !vml]><img width="44" height="44" style="width:.4583in;height:.4583in" src="cid:image002.png@01D93D2E.E1A5F500" align="left" hspace="12" alt="Grasshopper with solid fill" v:shapes="Graphic_x0020_1"><![endif]><span style="font-size:10.0pt;font-family:"Fira Sans",sans-serif">Ash
 Rivas (she/her)<o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Fira Sans",sans-serif">Travel Coordinator & Chair’s Assistant<o:p></o:p></span></b></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Fira Sans",sans-serif">Entomology Building #167<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Fira Sans",sans-serif">University of California, Riverside 92521<b><o:p></o:p></b></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Fira Sans",sans-serif">Office Phone: (951) 827-5192<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Fira Sans",sans-serif">E-mail:
<a href="mailto:ashley.hix@ucr.edu">ashley.hix@ucr.edu</a> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Fira Sans",sans-serif">Website:
<a href="https://entomology.ucr.edu/">https://entomology.ucr.edu</a> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Fira Sans",sans-serif">Zoom:
<a href="https://ucr.zoom.us/my/ash.rivas">https://ucr.zoom.us/my/ash.rivas</a> <o:p>
</o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Fira Sans",sans-serif"><o:p> </o:p></span></p>
<table class="MsoTableGrid" border="1" cellspacing="0" cellpadding="0" style="border-collapse:collapse;border:none">
<tbody>
<tr>
<td width="60" valign="top" style="width:44.75pt;border:solid windowtext 1.0pt;background:#7F7F7F;padding:0in 5.4pt 0in 5.4pt">
<p class="MsoNormal" align="center" style="text-align:center"><b><span style="font-size:8.0pt;font-family:"Fira Sans",sans-serif;color:white">Monday<o:p></o:p></span></b></p>
</td>
<td width="60" valign="top" style="width:45.0pt;border:solid windowtext 1.0pt;border-left:none;background:#7F7F7F;padding:0in 5.4pt 0in 5.4pt">
<p class="MsoNormal" align="center" style="text-align:center"><b><span style="font-size:8.0pt;font-family:"Fira Sans",sans-serif;color:white">Tuesday<o:p></o:p></span></b></p>
</td>
<td width="71" valign="top" style="width:53.05pt;border:solid windowtext 1.0pt;border-left:none;background:#7F7F7F;padding:0in 5.4pt 0in 5.4pt">
<p class="MsoNormal" align="center" style="text-align:center"><b><span style="font-size:8.0pt;font-family:"Fira Sans",sans-serif;color:white">Wednesday<o:p></o:p></span></b></p>
</td>
<td width="67" valign="top" style="width:50.45pt;border:solid windowtext 1.0pt;border-left:none;background:#7F7F7F;padding:0in 5.4pt 0in 5.4pt">
<p class="MsoNormal" align="center" style="text-align:center"><b><span style="font-size:8.0pt;font-family:"Fira Sans",sans-serif;color:white">Thursday<o:p></o:p></span></b></p>
</td>
<td width="60" valign="top" style="width:45.0pt;border:solid windowtext 1.0pt;border-left:none;background:#7F7F7F;padding:0in 5.4pt 0in 5.4pt">
<p class="MsoNormal" align="center" style="text-align:center"><b><span style="font-size:8.0pt;font-family:"Fira Sans",sans-serif;color:white">Friday<o:p></o:p></span></b></p>
</td>
</tr>
<tr>
<td width="60" valign="top" style="width:44.75pt;border:solid windowtext 1.0pt;border-top:none;background:#D9D9D9;padding:0in 5.4pt 0in 5.4pt">
<p class="MsoNormal" align="center" style="text-align:center"><span style="font-size:8.0pt;font-family:"Fira Sans",sans-serif;color:black">Remote</span><span style="font-size:8.0pt;font-family:"Fira Sans",sans-serif"><o:p></o:p></span></p>
</td>
<td width="60" valign="top" style="width:45.0pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;background:#D9D9D9;padding:0in 5.4pt 0in 5.4pt">
<p class="MsoNormal" align="center" style="text-align:center"><span style="font-size:8.0pt;font-family:"Fira Sans",sans-serif;color:black">In-Office</span><span style="font-size:8.0pt;font-family:"Fira Sans",sans-serif"><o:p></o:p></span></p>
</td>
<td width="71" valign="top" style="width:53.05pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;background:#D9D9D9;padding:0in 5.4pt 0in 5.4pt">
<p class="MsoNormal" align="center" style="text-align:center"><span style="font-size:8.0pt;font-family:"Fira Sans",sans-serif;color:black">Alternating</span><span style="font-size:8.0pt;font-family:"Fira Sans",sans-serif"><o:p></o:p></span></p>
</td>
<td width="67" valign="top" style="width:50.45pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;background:#D9D9D9;padding:0in 5.4pt 0in 5.4pt">
<p class="MsoNormal" align="center" style="text-align:center"><span style="font-size:8.0pt;font-family:"Fira Sans",sans-serif;color:black">Remote</span><span style="font-size:8.0pt;font-family:"Fira Sans",sans-serif"><o:p></o:p></span></p>
</td>
<td width="60" valign="top" style="width:45.0pt;border-top:none;border-left:none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt;background:#D9D9D9;padding:0in 5.4pt 0in 5.4pt">
<p class="MsoNormal" align="center" style="text-align:center"><span style="font-size:8.0pt;font-family:"Fira Sans",sans-serif;color:black">In-Office</span><span style="font-size:8.0pt;font-family:"Fira Sans",sans-serif"><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Fira Sans",sans-serif"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Concuradminusers <concuradminusers-bounces@lists.ucr.edu>
<b>On Behalf Of </b>UCR Information Technology Solutions<br>
<b>Sent:</b> Thursday, February 9, 2023 9:30 PM<br>
<b>To:</b> Concuradminusers@lists.ucr.edu; Concurtravelers@lists.ucr.edu; concurtravelarrangers@lists.ucr.edu<br>
<b>Subject:</b> [Concuradminusers] UCR ITS Information Security Notice: Concur<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p style="margin:0in;vertical-align:baseline">Hello Concur User,  <span style="font-size:9.0pt;font-family:"Segoe UI",sans-serif"><o:p></o:p></span></p>
</div>
<div>
<p style="margin:0in;vertical-align:baseline"><span style="font-size:9.0pt;font-family:"Segoe UI",sans-serif"><o:p> </o:p></span></p>
<p style="margin:0in;vertical-align:baseline;white-space:pre-wrap;font-kerning:none">
<span style="color:#C00000">This email is to inform you about a recent security event involving
<i>Concur</i>.  </span><span style="font-size:9.0pt;font-family:"Segoe UI",sans-serif"><o:p></o:p></span></p>
</div>
<div>
<p style="margin:0in;vertical-align:baseline"><span style="font-size:9.0pt;font-family:"Segoe UI",sans-serif"><o:p> </o:p></span></p>
<p style="margin:0in;vertical-align:baseline;white-space:pre-wrap;font-kerning:none">
Information Security Operations observed suspicious activity on a UCR account. <b>
Further investigation determined that this individual received an email that appeared to come from
<i>Concur </i>but was, in fact, a phishing email.</b> Rather than linking to the <i>
Concur </i>website, the “View Report” link within the email redirected to a cloned UCR single sign-on (CAS) page.  <span style="font-size:9.0pt;font-family:"Segoe UI",sans-serif"><o:p></o:p></span></p>
</div>
<div>
<p style="margin:0in;vertical-align:baseline"><span style="font-size:9.0pt;font-family:"Segoe UI",sans-serif"><o:p> </o:p></span></p>
<p style="margin:0in;vertical-align:baseline;white-space:pre-wrap;font-kerning:none">
The user then inadvertently provided their NetID credentials to the bad actor. Due to the level of sophistication of this attack, the user received a Duo push notification in real time, leading them to believe it was a result of the action they were taking
 on the fake UCR CAS page. Instead, it provided the bad actor with access to UCR’s secure systems, including financial data.  <span style="font-size:9.0pt;font-family:"Segoe UI",sans-serif"><o:p></o:p></span></p>
</div>
<div>
<p style="margin:0in;vertical-align:baseline"><span style="font-size:9.0pt;font-family:"Segoe UI",sans-serif"><o:p> </o:p></span></p>
<p style="margin:0in;vertical-align:baseline;white-space:pre-wrap;font-kerning:none">
<b>What does this mean? </b>  <span style="font-size:9.0pt;font-family:"Segoe UI",sans-serif"><o:p></o:p></span></p>
</div>
<div>
<p style="margin:0in;vertical-align:baseline">This security event is a reminder that you are a target of cyberattacks. Those with access to secure UCR systems, particularly anyone with a financial or procurement-based role, should remain hyper vigilant when
 conducting business online.  <span style="font-size:9.0pt;font-family:"Segoe UI",sans-serif"><o:p></o:p></span></p>
</div>
<div>
<p style="margin:0in;vertical-align:baseline"><span style="font-size:9.0pt;font-family:"Segoe UI",sans-serif"><o:p> </o:p></span></p>
<p style="margin:0in;vertical-align:baseline;white-space:pre-wrap;font-kerning:none">
<b>What can I do?</b> <span style="font-size:9.0pt;font-family:"Segoe UI",sans-serif"><o:p></o:p></span></p>
</div>
<div>
<p style="margin:0in;vertical-align:baseline">This is a very sophisticated attack with few obvious indicators of malintent. However, there are steps you can take to protect yourself:  <span style="font-size:9.0pt;font-family:"Segoe UI",sans-serif"><o:p></o:p></span></p>
<ul type="disc">
<li class="MsoNormal" style="color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1">
<b><span style="color:windowtext">Be wary of unexpected emails</span></b><span style="color:windowtext">. If you were not expecting to receive an email or system notification, you should exercise more caution when opening an email. </span><span style="font-size:9.0pt;font-family:"Segoe UI",sans-serif"><o:p></o:p></span></li><li class="MsoNormal" style="color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1">
<b><span style="color:windowtext">Validate any link contained within the email</span></b><span style="color:windowtext"> by hovering over it to see the URL to which the link points. If the URL looks unfamiliar, it may not be legitimate. One way to check this
 is to open a new browser window and go to the known website to see if the domain is the same.  </span><span style="font-size:9.0pt;font-family:"Segoe UI",sans-serif"><o:p></o:p></span></li><li class="MsoNormal" style="color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1">
<b><span style="color:windowtext">If you clicked on a link, verify that the URL in the browser bar is accurate</span></b><span style="color:windowtext">. In the case of the UCR CAS page, the domain at the beginning of the URL should be “<a href="https://auth.ucr.edu/...." target="_blank">https://auth.ucr.edu/....</a>”   </span><span style="font-size:9.0pt;font-family:"Segoe UI",sans-serif"><o:p></o:p></span></li><li class="MsoNormal" style="color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1">
<b><span style="color:windowtext">Do not use links within email messages to access services or websites</span></b><span style="color:windowtext">. If you do not have the service login page saved as a favorite or quick link, you are encouraged to access the
 service through R’Space (rspace.<a href="http://ucr.edu/" target="_blank">ucr.edu</a>). This helps to ensure that you will be directed to the legitimate service login page.  </span><span style="font-size:9.0pt;font-family:"Segoe UI",sans-serif"><o:p></o:p></span></li><li class="MsoNormal" style="color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1">
<b><span style="color:windowtext">Be aware that attacks like this are on the rise</span></b><span style="color:windowtext">, and that you are likely to see an increase in similarly sophisticated attacks. Keeping this in mind when interacting with emails, text
 messages, and other social platforms is an important step in keeping your data safe. </span><span style="font-size:9.0pt;font-family:"Segoe UI",sans-serif"><o:p></o:p></span></li></ul>
</div>
<div>
<p style="margin:0in;vertical-align:baseline"><span style="font-size:9.0pt;font-family:"Segoe UI",sans-serif"><o:p> </o:p></span></p>
<p style="margin:0in;vertical-align:baseline;white-space:pre-wrap;font-kerning:none">
If you believe you have been a victim of a cyberattack or scam, please email <span style="font-size:9.0pt;font-family:"Segoe UI",sans-serif">
<a href="mailto:abuse@ucr.edu" target="_blank"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#0563C1">abuse@ucr.edu</span></a></span>.  <span style="font-size:9.0pt;font-family:"Segoe UI",sans-serif"><o:p></o:p></span></p>
</div>
<div>
<p style="margin:0in;vertical-align:baseline"><span style="font-size:9.0pt;font-family:"Segoe UI",sans-serif"><o:p> </o:p></span></p>
<p style="margin:0in;vertical-align:baseline;white-space:pre-wrap;font-kerning:none">
Thank you,  <span style="font-size:9.0pt;font-family:"Segoe UI",sans-serif"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:10.35pt">
<span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#003DA5">Information Security Office</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:10.35pt">
<span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#003DA5">Information Technology Solutions</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:10.35pt">
<span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#003DA5">University of California, Riverside</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-line-height-alt:10.35pt">
<a href="https://its.ucr.edu/" target="_blank"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#003DA5">ITS.UCR.EDU</span></a><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><o:p> </o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span style="font-size:7.5pt;font-family:"Arial",sans-serif;color:#CC0000">Please Note: This email account is not monitored by ITS staff. If you require technical support, please
 take one of the following actions:</span></b><b><span style="font-size:7.5pt;font-family:"Arial",sans-serif"> </span></b><o:p></o:p></p>
<ul type="disc">
<li class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo2">
<span style="font-size:7.5pt;font-family:"Arial",sans-serif">Visit the ITS website at <a href="https://its.ucr.edu/" target="_blank">its.ucr.edu</a> to find self-help articles, submit and track support tickets, request IT services, and more.   </span><o:p></o:p></li><li class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l1 level1 lfo2">
<span style="font-size:7.5pt;font-family:"Arial",sans-serif">For live support, you can contact the BearHelp helpdesk during normal business hours (M-F, 8am-5pm) at 951-827-4848    </span><span style="font-family:"Arial",sans-serif"> </span><o:p></o:p></li></ul>
</div>
</div>
</div>
</div>
</body>
</html>