Thanks for sharing! With everything that's going on, people are sensitive to anything marked "payroll". Tim Tim White (he/him) *Systems Administrator*Addison Northwest School District Vergennes Union High School 50 Monkton Rd. Vergennes, Vt. 05491 802-471-2331 Fax 802-877-2558 On Thu, Mar 28, 2024 at 6:35 AM Suzanne Lee-Ciambra < [log in to unmask]> wrote: > We also had one come from Vermont Academy - we reached out to the "sender" > who said she knew her account was compromised and they were working on it. > Subject was "Attention Required - Urgent Notification" and somehow bypassed > my email quarantine for shared documents and went straight to the > recipient. > > On Thu, Mar 28, 2024 at 6:23 AM Tina Scheindel < > [log in to unmask]> wrote: > >> Thank you Nick for the heads up! >> >> On Thu, Mar 28, 2024 at 6:00 AM Nick Clark <[log in to unmask]> wrote: >> >>> Just as an FYI, another round of these must have just gone out last >>> night. Shared file name is the same - *2024 PAYROLL UPDATE.docx *- and >>> the domain it's coming from is @kckps.org (Kansas City Kansas Public >>> Schools). I've already emailed their support. >>> >>> On Mon, Mar 4, 2024 at 3:25 PM Trey Cates - Director of Technology < >>> [log in to unmask]> wrote: >>> >>>> Same here. We had a user fall for it, but our business office was smart >>>> enough to report the message. >>>> >>>> Sincerely, >>>> >>>> Trey Cates >>>> Director of Technology >>>> [log in to unmask] >>>> Central Vermont Supervisory Union >>>> 111B Brush Hill Road >>>> Williamstown, VT 05679 >>>> >>>> (802) 433-5818 ext. 1887 >>>> (802) 433-7087 (My Direct Line) >>>> (802) 433-7095 (Technology Team Help Desk) >>>> (802) 433-5825 (Fax) >>>> >>>> BOOK AN APPOINTMENT ONLINE: CLICK HERE >>>> <https://calendar.app.google/GN3AGnTvSsvLW9uT8> >>>> >>>> >>>> >>>> >>>> >>>> On Fri, Mar 1, 2024 at 11:07 AM Raymond Ballou < >>>> [log in to unmask]> wrote: >>>> >>>>> Dear List >>>>> >>>>> We had an account compromised, the only thing to add so far is that >>>>> the bad actor emailed our business office to have the employee's direct >>>>> deposit changed (which we won't do based on an email of course) about an >>>>> hour BEFORE they started sending out emails. >>>>> >>>>> Thanks to all, >>>>> >>>>> >>>>> R >>>>> >>>>> ----------------------------------------------------------------------- >>>>> >>>>> Search <http://list.uvm.edu/archives/school-it.html> the SCHOOL-IT >>>>> Archive >>>>> >>>>> Manage <http://list.uvm.edu/cgi-bin/wa?SUBED1=SCHOOL-IT&A=1> your >>>>> Subscription to SCHOOL-IT >>>>> >>>> >>>> *This email communication and any attachments may contain confidential >>>> and privileged information for the use of the designated recipients. If you >>>> have received this communication by mistake, please destroy and contact the >>>> sender.* >>>> >>>> ----------------------------------------------------------------------- >>>> >>>> Search <http://list.uvm.edu/archives/school-it.html> the SCHOOL-IT >>>> Archive >>>> >>>> Manage <http://list.uvm.edu/cgi-bin/wa?SUBED1=SCHOOL-IT&A=1> your >>>> Subscription to SCHOOL-IT >>>> >>> ----------------------------------------------------------------------- >>> >>> Search <http://list.uvm.edu/archives/school-it.html> the SCHOOL-IT >>> Archive >>> >>> Manage <http://list.uvm.edu/cgi-bin/wa?SUBED1=SCHOOL-IT&A=1> your >>> Subscription to SCHOOL-IT >>> >> >> >> -- >> Tina Scheindel, Technology Director and Integration Specialist >> Orange Southwest Supervisory District >> 24 Central Street >> Randolph, Vermont 05060 >> >> www.orangesouthwest.org >> >> 802-728-5052 >> >> >> >> ----------------------------------------------------------------------- >> >> Search <http://list.uvm.edu/archives/school-it.html> the SCHOOL-IT >> Archive >> >> Manage <http://list.uvm.edu/cgi-bin/wa?SUBED1=SCHOOL-IT&A=1> your >> Subscription to SCHOOL-IT >> > > > -- > Technology Department Coordinator > She/Her/Hers > Set up a meeting here <https://calendly.com/suzanneleeciambra> > > ----------------------------------------------------------------------- > > Search <http://list.uvm.edu/archives/school-it.html> the SCHOOL-IT Archive > > Manage <http://list.uvm.edu/cgi-bin/wa?SUBED1=SCHOOL-IT&A=1> your > Subscription to SCHOOL-IT >