If you are not redirected automatically, please follow this link to the new IT Status website.

More phishing emails

A phishing email with Subject:

[URGENT]

and claiming to come From:

“University of Toronto” <help...@math.toronto.edu>

has been sent to the department.  Please delete it, it is spam.

More phishing emails (this time for utoronto.ca)

The University announced that:

There may be a “verify your account, click here” type message coming from “accounts-utoronto.ca” targeting utoronto.ca mail accounts.  Not sure whether it is scarce, or widespread, but just in case, this is an early warning.

Please do not follow any such links.

Another phishing email with subject “University of Toronto (Maths Dept)”

A phishing email, purporting to come from:

noti...@math.toronto.edu” <pgom...@gmail.com>

and with message:

This is an impromptu notification, download the attached PDF file and reply to this email.

has been sent to some people in the department. Please delete it without opening the PDF file.

Another phishing email with subject “Important Notice.”

A phishing email, purporting to come from:

ithe...@math.toronto.edu” <pgom...@gmail.com>

and with message:

Attached to this email in PDF format are updates about your email.

has been sent to some people in the department.  Please ignore it.

 

 

 

“spear phishing” spam email with Subject “News Update”

Starting yesterday evening people in the department were sent a spam email (of the spear phishing variety) with a Subject line that read “News Update” with an unusual URL in the body of the message and which purportedly was sent by Beverley (it was not sent by her).  Please just delete that message.

Much larger email quotas

Now that our new backup servers are online there is more space and the email quotas have been increased for all users by one-half gigabyte.

Phishing email messages

Starting yesterday afternoon there were many phishing emails sent out to departmental members.  If you received an email from:

“Department of Mathematics, University of Toronto” help...@math.toronto.edu

with Subject Line:

Your Mailbox Has Exceeded

and the message asks you to click on a link that is in Germany (the hostname part ends in “.de”) then that is a phishing message.

There is a new command on coxeter called spamfiltering_gui which is a simple graphical interface to change email spamfiltering options (there is a command line interface called spamfiltering).  You can change three options via this new interface:

Aggressiveness from 0 (off) to 9 (extremely aggressive).  This controls how many messages will be put automatically in your SuspectedSpam folder, instead of being delivered to your main mailbox.  This is based on an estimate of the likelihood that a message is spam.

Autoexpire can be off or on, and if it is on you can choose how many days to leave messages in the SuspectedSpam folder before they are deleted by the system.

Autodelete can be off or on.  This automatically deletes messages which are judged as being spam with probability 99% or 100%.  It is highly recommended that this be left on, which is the system default.

The email aliases for “faculty” and “consult” are often abused by outsiders to send spam.  As of late yesterday a new filter was added which will automatically discard any email that includes those aliases unless it comes from (approximately) a UofT address.  Most of such spam was automatically discarded (because of our default autodelete settings) by our spam filter in any case, and almost all of the rest was sent to the SuspectedSpam folder (even at our low aggressiveness setting), but this should help with the few, but annoying, spam emails that have gotten through.

If you manage a mailing list and would benefit from similar automatic deletion please let us know at requests@math.toronto.edu.