New Phishing Defenses

Dateline Thursday, February 16, 2017:

On behalf of the ITS-Systems e-mail team I would like to share an update on their effort to move the campus e-mail defenses to the Cisco hosted platform so that we can properly leverage some much needed features.

ITS-Systems is in the process of adjusting some e-mail filtering workflow to better automate detection and notification.  This change will give the ITS-Systems e-mail team a chance to perform final testing of the new Cisco hosted platform and will help the university get there faster — forecast in the next 2-3 weeks.

Once this adjusted e-mail filtering workflow is in place, the following new tagged e-mail notification will exist:

 [UTEXAS: POSSIBLY MALICIOUS CONTENT]

As with the existing ‘SUSPECTED SPAM’ tagged messages, this tag will be prepended to the original subject line of the message.
It is possible that some recipients will receive a few more tagged messages than normal since the new filtering workflow will be a bit more aggressive.

The following resource has also been updated to include the new filtering tag in the event folks want to locally filter these e-mail to their respective spam or junk folder:

 https://ut.service-now.com/utss/KAhome.do?number=KB0011401

Once the move to the Cisco hosted service is complete, the campus should notice a positive reduction or neutering of phishing and malicious e-mails.

Please contact the ITS Service Desk if you have any questions or experience any issues with this new change.

--
Cam Beasley
Chief Information Security Officer
Information Security Office
The University of Texas at Austin