Computing Services News

Security Alert: Fraud Emails - VERIFY YOUR ANDREW.CMU.EDU EMAIL ACCOUNT NOW.

Who: Everyone

What: Fraud Emails - VERIFY YOUR ANDREW.CMU.EDU EMAIL ACCOUNT NOW.

When: May 7, 2008

How:
Fraud emails have recently been sent to Carnegie Mellon email accounts claiming to be from "ADMIN HELPDESK" <adminhelpdesk7@gmail.com>. The fraud messages ask people to reply with their EMAIL Password. PLEASE ENABLE SPAM FILTERING AND DO NOT REPLY!

A sample of the fraud message follows:

From: "ADMIN HELPDESK" <adminhelpdesk7@gmail.com>
Date: Wed, 07 May 2008 14:46:19 -0400
Subject: VERIFY YOUR ANDREW.CMU.EDU EMAIL ACCOUNT NOW.

Dear andrew.cmu.edu Email Account Owner,

To complete your CMU UNIVERSITY webmail account, you must reply to this
email immediately and enter your Password here (*********)

This message is from andrew.cmu.edu messaging center to all
andrew.cmu.edu email account owners. We are currently
upgrading our data base and e-mail account center. We
are deleting all unused andrew.cmu.edu email accounts to
create more space for new accounts.

To prevent your account from being closed, you will
have to update it below so that we will know that it's
a present used account.

CONFIRM YOUR EMAIL IDENTITY BELOW

Email Username : .......... .....
EMAIL Password : ................
Date of Birth : .................
Country or Territory : ..........

Warning!!! Account owner that refuses to update his or
her account within Seven days of receiving this
warning will lose his or her account permanently.

Thank you for using andrew.cmu.edu
Warning Code:VX2G99AAJ

andrew.cmu.edu Team

www.andrew.cmu.edu

What You Need To Do:
If you suspect your computer has already been compromised, STOP! Read and follow Responding to a Compromised Computer.

If your computer is managed by a Carnegie Mellon departmental computing administrator, please consult that person before making any system changes.

Follow the detailed steps below:

If you sent your password in a reply, change your password immediately and contact the Computing Services Help Center.
1. Change to a strong password by visiting the My Accounts: Password page.
2. Contact the Computing Services Help Center at x8-HELP(4357) or send email to advisor@andrew.cmu.edu.
Enable the Andrew Spam Filter to prevent receiving these fraud messages in your INBOX.
See Enable Spam Filter Using Portal
If you received the fraud email, delete it.
Secure Your Computer***
Mac instructions
Windows Vista instructions
Windows XP instructions

Contact:
Please direct any questions or comments to the Computing Services Help Center at x8-HELP (4357) or advisor@andrew.cmu.edu, or to your departmental administrator or DSP consultant.

Improving Password Management

Coming August 2008, you will see a change in the way you manage your Andrew and Active Directory passwords. A new password reset interface, online August 1, will replace Kerberos, Unix and existing web pages. It will also allow users to change both their Andrew and Active Directory passwords simultaneously. Look for more information this summer.

Please direct additional questions or comments to your departmental administrator, DSP consultant or the Computing Services Help Center at advisor@andrew.cmu.edu.

Security Alert: Fraud Emails - Please Verify Your Email Address

Who: Everyone

What: Fraud Emails - Please Verify Your Email Address

When: Apr 30, 2008

How:
Fraud emails have recently been sent to Carnegie Mellon email accounts claiming to be from "CMU HELP DESK" <helpdek@cmu.edu>. The fraud messages ask people to reply with their CMU UNIVERSITY webmail password. PLEASE DO NOT REPLY!

A sample of the fraud message follows:

From: "CMU HELP DESK" <helpdek@cmu.edu>
Date: Wed, 30 Apr 2008 00:44:58 +0200
Subject: Please Verify Your Email Address
Reply-To: helphouse2007@gmail.com

Dear CMU Webmail User,

To complete your CMU UNIVERSITY webmail account, you must reply to this
email immediately and enter your Password here (*********)

Failure to do this will immediately render your email address deactivated
from our database.

We apologise for any inconveniences, but trust you understand that our
primary concern is for our customers to be totally secure.

THE CMU HELP DESK

If you sent your password in a reply, change your password immediately and contact the Computing Services Help Center.
1. Change to a strong password by visiting the My Accounts: Password page.
2. Contact the Computing Services Help Center at x8-HELP(4357) or send email to advisor@andrew.cmu.edu.
If you received the fraud email, delete it.
Secure Your Computer***
Mac instructions
Windows Vista instructions
Windows XP instructions

Contact:
Please direct any questions or comments to the Computing Services Help Center at x8-HELP (4357) or advisor@andrew.cmu.edu, or to your departmental administrator or DSP consultant.

PUBLICATION: Procedure for Responding to a Compromised Computer

The Information Security Office has published an updated procedure for responding to a compromised computer. Click below for more information.

http://www.cmu.edu/iso/governance/procedures/compromised-computer.html

Configuring Time Capsule for Campus

DATE: 4/23/08
AREA AFFECTED: Campus-wide
SERVICES AFFECTED: Wireless

Apple recently released Time Capsule, a WiFi base station with an internal hard drive that can be used as a wireless-accessible network disk for file sharing by Mac & PC users. In addition, Mac users can use Time Capsule for wireless backups.

If you have purchased a Time Capsule and would like to use it on campus, you must first configure it to work with our wireless network. Out of the box, the Time Capsule operates as a WiFi access point, which will interfere with the operation of the campus-wide wireless network. Without proper configuration, the Time Capsule may be viewed as a “rogue” wireless access point and be removed from the campus network.

For steps on how to properly configure a Time Capsule for use on campus, go to:
<http://www.cmu.edu/computing/doc/network/time-capsule/>.

Please direct any questions or comments to the Computing Services Help Center at x8-HELP or advisor@andrew.cmu.edu, or to your departmental administrator or DSP consultant.