The Arkansas State Cyber Security Office has been notified by the FBI that there is currently a “spear phishing” campaign underway. The attack is being conducted by sending spoof emails to government entities with either Word, Adobe (pdf) or Excel attachments as well as links to malicious web sites and domains. The attacks are also focused on personal e-mails accounts (Yahoo, Gmail, etc.) of certain targeted individuals. In these cases, the email is related to a password reset from the system administrator. We are already seeing some of these emails with attachments trying to move through the state email system, so please exercise extreme caution for the next couple of weeks. If you receive an email from someone you do not recognize and it looks odd, please do not open any attachments or click on any web links.
If you have questions regarding an email or link, contact the Campus Support Center at firstname.lastname@example.org or 479.968.0646.