Phone number for hacker social engineering service desk
I think Jeremy asked about the phone numbers for calls from hackers. We had another social engineering call that was definitely a bad actor this morning, the phone call came in from 205-383-1176.
Same exact people that were after us this morning. At about 9:45am we had a phone call to the help desk from the exact same number attempting to reset a former Dean's password. Had his social and birthdate handy. Luckily the Help Desk agent knew the person being impersonated and knew it was fake. They were persistent, calling back multiple times. ________________________________ From: USHE-ISO ushe-iso-bounces@lists.dixie.edu on behalf of Eric Bennick via USHE-ISO ushe-iso@lists.dixie.edu Sent: Friday, June 28, 2024 4:12 PM To: ushe-iso@lists.dixie.edu ushe-iso@lists.dixie.edu Subject: [USHE-ISO] Phone number for hacker social engineering service desk
I think Jeremy asked about the phone numbers for calls from hackers. We had another social engineering call that was definitely a bad actor this morning, the phone call came in from 205-383-1176.
Same number today at 9:00 AM. Help Desk student recognized and didn't even start the verification process because he knew it was a bad actor.
The phone number from earlier in the week was 801-298-8080. I called it later that day and it is a Google Voice number. I haven't tried today's number.
Jim
On Fri, Jun 28, 2024 at 4:23 PM Shaun Stapley via USHE-ISO < ushe-iso@lists.dixie.edu> wrote:
Same exact people that were after us this morning. At about 9: 45am we had a phone call to the help desk from the exact same number attempting to reset a former Dean's password. Had his social and birthdate handy. Luckily the Help Desk agent
Same exact people that were after us this morning. At about 9:45am we had a phone call to the help desk from the exact same number attempting to reset a former Dean's password. Had his social and birthdate handy. Luckily the Help Desk agent knew the person being impersonated and knew it was fake. They were persistent, calling back multiple times.
*From:* USHE-ISO ushe-iso-bounces@lists.dixie.edu on behalf of Eric Bennick via USHE-ISO ushe-iso@lists.dixie.edu *Sent:* Friday, June 28, 2024 4:12 PM *To:* ushe-iso@lists.dixie.edu ushe-iso@lists.dixie.edu *Subject:* [USHE-ISO] Phone number for hacker social engineering service desk
I think Jeremy asked about the phone numbers for calls from hackers. We had another social engineering call that was definitely a bad actor this morning, the phone call came in from 205-383-1176. -- USHE-ISO mailing list USHE-ISO@lists.dixie.edu
https://urldefense.com/v3/__http://lists.dixie.edu/cgi-bin/mailman/listinfo/...
Also,
Looks like the University of Michigan is sending some DocuSign phishes. I'd check your emails for it. We've had no subjects on them or "Endorsement Required!" and all the sender names are random-generated ones @umich.edu.
Have a great weekend!
[image: image.png]
On Fri, Jun 28, 2024 at 5:27 PM Jim Shakespear shakespear@suu.edu wrote:
Same number today at 9:00 AM. Help Desk student recognized and didn't even start the verification process because he knew it was a bad actor.
The phone number from earlier in the week was 801-298-8080. I called it later that day and it is a Google Voice number. I haven't tried today's number.
Jim
On Fri, Jun 28, 2024 at 4:23 PM Shaun Stapley via USHE-ISO < ushe-iso@lists.dixie.edu> wrote:
Same exact people that were after us this morning. At about 9: 45am we had a phone call to the help desk from the exact same number attempting to reset a former Dean's password. Had his social and birthdate handy. Luckily the Help Desk agent
Same exact people that were after us this morning. At about 9:45am we had a phone call to the help desk from the exact same number attempting to reset a former Dean's password. Had his social and birthdate handy. Luckily the Help Desk agent knew the person being impersonated and knew it was fake. They were persistent, calling back multiple times.
*From:* USHE-ISO ushe-iso-bounces@lists.dixie.edu on behalf of Eric Bennick via USHE-ISO ushe-iso@lists.dixie.edu *Sent:* Friday, June 28, 2024 4:12 PM *To:* ushe-iso@lists.dixie.edu ushe-iso@lists.dixie.edu *Subject:* [USHE-ISO] Phone number for hacker social engineering service desk
I think Jeremy asked about the phone numbers for calls from hackers. We had another social engineering call that was definitely a bad actor this morning, the phone call came in from 205-383-1176. -- USHE-ISO mailing list USHE-ISO@lists.dixie.edu
https://urldefense.com/v3/__http://lists.dixie.edu/cgi-bin/mailman/listinfo/...
-- [image: suu.edu] https://www.suu.edu/ JIM SHAKESPEAR | Chief Information Security Officer / Director of IT Security / Institutional Data Privacy Officer INFORMATION TECHNOLOGY, SOUTHERN UTAH UNIVERSITY ELC513 https://map.concept3d.com/?id=821#!m/129644?s/ | (435) 865-8202
Thanks Jim, in gathering IOCs we've found since last week. I'll forward them to the group shortly.
On Fri, Jun 28, 2024, 5:33 PM Jim Shakespear via USHE-ISO < ushe-iso@lists.dixie.edu> wrote:
Also,
Looks like the University of Michigan is sending some DocuSign phishes. I'd check your emails for it. We've had no subjects on them or "Endorsement Required!" and all the sender names are random-generated ones @umich.edu.
Have a great weekend!
[image: image.png]
On Fri, Jun 28, 2024 at 5:27 PM Jim Shakespear shakespear@suu.edu wrote:
Same number today at 9:00 AM. Help Desk student recognized and didn't even start the verification process because he knew it was a bad actor.
The phone number from earlier in the week was 801-298-8080. I called it later that day and it is a Google Voice number. I haven't tried today's number.
Jim
On Fri, Jun 28, 2024 at 4:23 PM Shaun Stapley via USHE-ISO < ushe-iso@lists.dixie.edu> wrote:
Same exact people that were after us this morning. At about 9: 45am we had a phone call to the help desk from the exact same number attempting to reset a former Dean's password. Had his social and birthdate handy. Luckily the Help Desk agent Same exact people that were after us this morning. At about 9:45am we had a phone call to the help desk from the exact same number attempting to reset a former Dean's password. Had his social and birthdate handy. Luckily the Help Desk agent knew the person being impersonated and knew it was fake. They were persistent, calling back multiple times.
*From:* USHE-ISO ushe-iso-bounces@lists.dixie.edu on behalf of Eric Bennick via USHE-ISO ushe-iso@lists.dixie.edu *Sent:* Friday, June 28, 2024 4:12 PM *To:* ushe-iso@lists.dixie.edu ushe-iso@lists.dixie.edu *Subject:* [USHE-ISO] Phone number for hacker social engineering service desk
I think Jeremy asked about the phone numbers for calls from hackers. We had another social engineering call that was definitely a bad actor this morning, the phone call came in from 205-383-1176. -- USHE-ISO mailing list USHE-ISO@lists.dixie.edu
https://urldefense.com/v3/__http://lists.dixie.edu/cgi-bin/mailman/listinfo/...
-- [image: suu.edu] https://www.suu.edu/ JIM SHAKESPEAR | Chief Information Security Officer / Director of IT Security / Institutional Data Privacy Officer INFORMATION TECHNOLOGY, SOUTHERN UTAH UNIVERSITY ELC513 https://map.concept3d.com/?id=821#!m/129644?s/ | (435) 865-8202
-- [image: suu.edu] https://www.suu.edu/ JIM SHAKESPEAR | Chief Information Security Officer / Director of IT Security / Institutional Data Privacy Officer INFORMATION TECHNOLOGY, SOUTHERN UTAH UNIVERSITY ELC513 https://map.concept3d.com/?id=821#!m/129644?s/ | (435) 865-8202 -- USHE-ISO mailing list USHE-ISO@lists.dixie.edu http://lists.dixie.edu/cgi-bin/mailman/listinfo/ushe-iso
participants (3)
-
Eric Bennick -
Jim Shakespear -
Shaun Stapley