CrytpoLocker Trojan Warning

Many businesses and even State of Kansas Agencies have been targeted by a new form of ransomware – software that takes away access to your files and demands payment to return access.  This software has been spread mostly by very official-looking and targeted e-mails.  These e-mails may be very difficult to differentiate from real e-mails.  An example message is below:

From: John Doe
Sent: Tuesday, October 15, 2013 10:34 AM
To: Jane Doe
Subject: Annual Form – Authorization to Use Privately Owned Vehicle on State Business
All employees need to have on file this form STD 261 (attached). The original is retained by supervisor and copy goes to Accounting. Accounting need this form to approve mileage reimbursement.
The form can be used for multiple years, however it needs to re-signed annually by employee and supervisor.
Please confirm all employees that may travel using their private car on state business (including training) has a current STD 261 on file. Not having a current copy of this form on file in Accounting may delay a travel reimbursement claim.

Opening the attached file in the e-mail immediately starts a process that encrypts important files – Word, Excel, PowerPoint, photos, music, video, and many other commonly used file types.  The encryption used is effectively unbreakable, once encrypted ITS staff cannot restore access to those files except by accessing backups.

Contact ITS staff at 785-670-3000 immediately if you receive any messages you think may be malicious and do not open e-mail attachments unless they are expected and from trusted individuals.

For more information on Cryptolocker, see these links:

http://blog.malwarebytes.org/intelligence/2013/10/cryptolocker-ransomware-what-you-need-to-know/

http://www.bleepingcomputer.com/virus-removal/cryptolocker-ransomware-information

http://www.kake.com/home/headlines/CryptoLocker-Virus-Strikes-Pratt-Police-Department-230602031.html

 

Office 365 Progress and Preparation

Information Technology Services has finished migrating to Office 365.  All ITS staff are now using Office 365 for our email and calendar.  All of our student workers are using the new Office 365 as well.  We are happy to report that everything is working great! 

As we prepare to migrate those individuals that volunteered to be early adopters, we are working on documentation as well as the schedule for migrating all of campus.  We have the web site (http://www.washburn.edu/a-z-index/its/email-calendar) where we will be posting documentation, migration schedule, pre-migration, and post migration steps.  We will also be announcing drop in sessions for question and answer one-on-one sessions.

A few items to remind you about that are also listed on the web site (http://www.washburn.edu/a-z-index/its/email-calendar/prepare-migration.html) include:

  1. Delete any unneeded mail – Delete any email you do not need to keep. This will help your migration go faster.
  2. Trash Folder – Empty your trash and keep it empty. The trash, deleted, and deleted items folders will not be migrated to the new system. If you need assistance checking your Trash folder settings to make sure that messages are being purged, please contact 785-670-3000 or email support@washburn.edu. If you are using the Trash folder as a “staging area” for email prioritization, you will need to come up with a different folder to use for that purpose.
  3. Folder names — Remove any special characters from folder names to ensure a smooth transfer. Special characters include: !@#$%^&*
  4. Large messages/attachments — Large messages greater than 25 MB  may not easily migrate to the new system, so be sure to download any attachments you need to keep. Thunderbird will allow you to search for messages by size. MyWashburn webmail will allow messages to be displayed by size which can help locating large files. Please contact support@washburn.edu or call 785-670-3000 if you need assistance.
  5. Save any .exe attachments — The new email system will not accept email attachments with executable files (even if they are zipped), so be sure to save any .exe files before your migration.

Please watch the web site and email announcements for additional information.  Any questions or concerns, please contact ITS User Services at 785-670-3000 or via email support@washburn.edu.