Re: [Security-l] Differentiating Between Real and Phishing Emails to Staff and Students

[Barry Lynam <b.lynam () QUT EDU AU>]

Similar here, messages are from the registrar or deputy vice-chancellor.  We
don¹t accept email from: registrar address from outside QUT, only able to be
used as a from for internal IP¹s.

We are also looking at digitally signing email from some specific accounts,
along with the education involved in that.

Barry


On 13/05/08 3:24 PM, "Leigh Vincent" <l.vincent () ballarat edu au> wrote:

> Hey Tim,
> At UB we send out any ICT specific notifications using a standard email
> template and the subjects are prefixed with either "IS ALERT" or "IS
> Announce" depending on the notification being sent.
>
> If I am alerting users to a new virus or email etc, I send and IS
> ALERT.  If we are notifying users of downtime or maintenance etc, we
> send an IS Announce.
>
> Hope this helps mate.
>
> Cheers
> Leigh
>
> Leigh Vincent
> Information Security Officer
> Information Services
> University of Ballarat
> PO Box 663
> BALLARAT   VIC   3353
>
> Tel: +61 3 5327 9386
> Mobile: 0439 357 203
> e-Mail: l.vincent () ballarat edu au
> http://www.ballarat.edu.au
> CRICOS Provider Number:  00103D
>
>
> > > > > > > "Tim Lane" <tlane () scu edu au> 13/05/2008 3:04 pm >>>
> Hi All,
>
>
>
> I regularly send out emails to staff and students advising on phishing
> scams, general security alerts, password changes etc.  As the frequency
> of
> targeted phishing scams increase, I continue to get more queries by
> staff
> and students questioning if the very emails I send to staff and
> students are
> valid or a scam.
>
>
>
> I would be interested in knowing how other institutions are providing
> increasing assurance to staff and students that emails from their IT
> or
> Security section are valid.
>
>
>
> Examples might include disclaimers, digital signatures or encryption
> etc,
> but if this is an area you have looked at and addressed could you
> please
> advise.
>
>
>
> Thanks,
>
>
>
> Tim
>
>
>
>
>
>
>
> Tim Lane
>
> Information Security Manager
>
> IT&TS
>
> Southern Cross University
>
> Ph (02) 6620 3530
>
> Mobile 0418 248 571
>
>
>
>
> _______________________________________________
> Security-l mailing list
> Security-l () lists aarnet edu au
> http://lists.aarnet.edu.au/mailman/listinfo/security-l
>
>
> --
> Barry Lynam | Manager, IT Security | IT Services | QUT
> Phone: +61 7 3138 9408 | Fax: +61 7 3138 2921
> Postal: Level 12, 126 Margaret St | GPO Box 2434 | Brisbane QLD 4001 |
> AUSTRALIA
> Email: b.lynam () qut edu au | http://www.qut.edu.au/security/
> CRICOS No 00213J

Attachment: smime.p7s
Description: