New Alert Process for CEO Fraud

New Alert Regarding Suspected CEO Fraud

sic at ITMC maintains filters that detect so-called CEO fraud. You can find more information about these fraud attempts on the service portal under “CEO Fraud.”

Until now, we had been redirecting these emails. However, since the filters were not always accurate, legitimate emails were sometimes delivered later. From now on, potential scam emails of this type will have [WARNING FRAUD] in the subject line and, similar to attachments with active content, will be sent to recipients in a warning email:

You have received a potentially fraudulent email, known as “CEO fraud.”
From: $From $EnvelopeFrom
Subject: $Subject

Sender: $remotehost ($remoteip / $Reputation)

The original email is attached to this message.

Pay close attention to file extensions and sender addresses. If the email appears to be from someone you know, verify—preferably through another channel—that the email was actually sent by that person before opening it.
For more information, visit the TU Dortmund University service portal and search for “CEO Fraud.”

 

The sic receives copies of suspicious emails; it is not necessary to report them to us.

sic, the Security Information Center at the itmc of TU Dortmund University