<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Good afternoon,<o:p></o:p></p>
<p class="MsoNormal">We have been made aware that a ransomware attack on a city government in Ohio that was conducted in 2018 resulted in a compromised local contact list. This list is now being used to spoof email addresses. These spoofed email addresses
are used to email other public entities Microsoft Word documents containing malicious code. The spoofed email addresses have been observed ending in “.ru” and “.fiberathome.net” rather than “.com” or “.gov”. Spoofing is when a hacker impersonates another
email and emails sent may appear as a normal or familiar email address.<o:p></o:p></p>
<p class="MsoNormal">Users should be advised not to open any suspicious Microsoft Word documents. If a user is sent a Microsoft Word Document and it does not open, users should alert their local technical contacts immediately. This a known indicator that the
Microsoft Word Document contains malware.<o:p></o:p></p>
<p class="MsoNormal">Thank you,<o:p></o:p></p>
<p class="MsoNormal">Thor<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thor Sage<o:p></o:p></p>
<p class="MsoNormal">Executive Director<o:p></o:p></p>
<p class="MsoNormal">Miami Valley Educational Computer Association<o:p></o:p></p>
<p class="MsoNormal">937-767-1468 x3101<o:p></o:p></p>
<p class="MsoNormal"><a href="http://www.mveca.org/"><span style="color:windowtext;text-decoration:none"><img border="0" width="174" height="64" style="width:1.8125in;height:.6666in" id="Picture_x0020_1" src="cid:image001.jpg@01D58E78.5AC0C460" alt="http://www.mveca.org/images/logo.gif"></span></a>
<a href="https://www.linkedin.com/company-beta/3947840/"><span style="color:windowtext;text-decoration:none"><img border="0" width="32" height="32" style="width:.3333in;height:.3333in" id="_x0000_i1027" src="cid:image002.jpg@01D58E78.5AC0C460" alt="i"></span></a><a href="https://twitter.com/mvecarcog"><span style="color:windowtext;text-decoration:none"><img border="0" width="32" height="32" style="width:.3333in;height:.3333in" id="Picture_x0020_2" src="cid:image003.jpg@01D58E78.5AC0C460" alt="t"></span></a><a href="https://www.facebook.com/MVECA-707401659416692/"><span style="color:windowtext;text-decoration:none"><img border="0" width="32" height="32" style="width:.3333in;height:.3333in" id="Picture_x0020_3" src="cid:image004.jpg@01D58E78.5AC0C460" alt="f"></span></a><o:p></o:p></p>
<p class="MsoNormal"><i>Not-for-profit Technology Services for Education and Local Governments<o:p></o:p></i></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>