<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Segoe UI";
panose-1:2 11 5 2 4 2 4 2 2 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-name:"Normal\,DocText";
margin-top:0in;
margin-right:0in;
margin-bottom:8.0pt;
margin-left:0in;
line-height:105%;
font-size:12.0pt;
font-family:"Segoe UI",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
p.paragraph, li.paragraph, div.paragraph
{mso-style-name:paragraph;
mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.normaltextrun
{mso-style-name:normaltextrun;}
span.eop
{mso-style-name:eop;}
span.tlp-amber
{mso-style-name:tlp-amber;}
span.EmailStyle24
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:121928407;
mso-list-template-ids:-1396404190;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1
{mso-list-id:847912523;
mso-list-type:hybrid;
mso-list-template-ids:-677193324 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l1:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l2
{mso-list-id:856894539;
mso-list-type:hybrid;
mso-list-template-ids:-836365824 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l2:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l2:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l2:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l2:level4
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l2:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l2:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l2:level7
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l2:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l2:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l3
{mso-list-id:1506360636;
mso-list-template-ids:-414834738;}
@list l3:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level2
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level3
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level4
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level5
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level6
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level7
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level8
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level9
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;line-height:105%;font-family:"Calibri",sans-serif;color:#1F497D">Please see the below cybersecurity notification on “quishing.”<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;line-height:105%;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Thor Sage<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Executive Director<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Miami Valley Educational Computer Association<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">937-767-1468 x3101<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<a href="http://www.mveca.org/"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;text-decoration:none"><img border="0" width="174" height="64" style="width:1.8125in;height:.6666in" id="_x0000_i1028" src="cid:image002.jpg@01D9F12F.4E738210" alt="http://www.mveca.org/images/logo.gif"></span></a><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">
</span><a href="https://www.linkedin.com/company/mveca/"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;text-decoration:none"><img border="0" width="32" height="32" style="width:.3333in;height:.3333in" id="_x0000_i1027" src="cid:image003.jpg@01D9F12F.4E738210" alt="i"></span></a><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<i><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Not-for-profit Technology Services for Education and Local Governments<o:p></o:p></span></i></p>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt;line-height:105%;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Burner, Jillian <jburner@OhioSOS.Gov>
<br>
<b>Sent:</b> Wednesday, September 27, 2023 10:30 AM<br>
<b>Subject:</b> TLP: AMBER - Cybersecurity Notification: Increase in QR Code Phishing Emails<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="border:solid black 3.0pt;padding:0in 0in 0in 0in">
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal;background:red">
<b><span style="font-family:"Arial",sans-serif;color:yellow">CAUTION:</span></b><span style="font-family:"Arial",sans-serif;color:white"> This email originated from outside of the organization. Do not click links or open attachments unless you recognize the
sender and know the content is safe.<o:p></o:p></span></p>
</div>
<div>
<p class="paragraph" align="center" style="mso-margin-top-alt:6.0pt;margin-right:0in;margin-bottom:6.0pt;margin-left:0in;text-align:center;vertical-align:baseline">
<a name="_Hlk130909339"><span class="normaltextrun"><b>Cybersecurity Notification – September 27, 2023</b></span><span class="eop"> </span><o:p></o:p></a></p>
<p class="paragraph" align="center" style="mso-margin-top-alt:6.0pt;margin-right:0in;margin-bottom:6.0pt;margin-left:0in;text-align:center;vertical-align:baseline">
<span style="mso-bookmark:_Hlk130909339"><span class="normaltextrun"><b>NOTICE: <span style="color:#FFC000;background:black;mso-highlight:black">
TLP:AMBER</span><span style="color:#FFC000"> </span>UNCLASSIFIED//FOR OFFICIAL USE ONLY</b></span><span class="eop"> </span><o:p></o:p></span></p>
<p class="paragraph" align="center" style="margin:0in;margin-bottom:.0001pt;text-align:center;vertical-align:baseline">
<span style="mso-bookmark:_Hlk130909339"><o:p> </o:p></span></p>
<p class="paragraph" style="vertical-align:baseline"><span style="mso-bookmark:_Hlk130909339"><b>Increase in QR Code Phishing Emails (“Quishing”)<o:p></o:p></b></span></p>
<p class="paragraph" style="vertical-align:baseline"><span style="mso-bookmark:_Hlk130909339"><a name="_Hlk132198942">Recently, the SOS Cyber Defense Team has observed an increase in phishing emails containing QR codes. Like typical phish, they use a sense
of urgency to trick the recipient into clicking a link. The difference is that the link is embedded in a QR code. This technique makes it difficult for email security tools to identify the dangerous website link.<br>
<br>
Attackers are using images of QR codes to bypass email security tools; however, they still require the victim to scan the code to be compromised. Think carefully before you click links in emails or scan QR codes.<o:p></o:p></a></span></p>
<p class="paragraph" style="vertical-align:baseline"><span style="mso-bookmark:_Hlk130909339"><span style="mso-bookmark:_Hlk132198942">The following screenshot is an example of “quishing.” This “quish” was sent to SOS staff and county board of elections staff.
At this time, email security tools cannot identify emails like this as malicious.<o:p></o:p></span></span></p>
<p class="paragraph" align="center" style="text-align:center;vertical-align:baseline">
<span style="mso-bookmark:_Hlk130909339"><span style="mso-bookmark:_Hlk132198942"><img border="0" width="335" height="424" style="width:3.4895in;height:4.4166in" id="Picture_x0020_2" src="cid:image004.jpg@01D9F12D.86982300" alt="Graphical user interface, text, application
Description automatically generated"><o:p></o:p></span></span></p>
<p class="paragraph" style="margin:0in;margin-bottom:.0001pt;vertical-align:baseline">
<span style="mso-bookmark:_Hlk130909339"><span style="mso-bookmark:_Hlk132198942"><span class="normaltextrun">Pause and think before clicking a link or downloading an attachment. Phishing scams rely on users moving quickly through their inbox. It is important
to stop and review emails, links and QR codes before you click, download, scan or reply. Use the Report Phishing button if available. If you need assistance, please open a ticket with the Cyber Defense Team at
</span></span></span><a href="mailto:help@ohiosos.gov"><span style="mso-bookmark:_Hlk130909339"><span style="mso-bookmark:_Hlk132198942">help@ohiosos.gov</span></span><span style="mso-bookmark:_Hlk130909339"><span style="mso-bookmark:_Hlk132198942"></span></span></a><span style="mso-bookmark:_Hlk130909339"><span style="mso-bookmark:_Hlk132198942"><span class="normaltextrun">
</span></span></span><span style="mso-bookmark:_Hlk130909339"><span style="mso-bookmark:_Hlk132198942"><b><span style="font-size:8.0pt;color:#FFC000;background:black;mso-highlight:black"><o:p></o:p></span></b></span></span></p>
<p class="paragraph" style="text-align:justify;vertical-align:baseline"><span style="mso-bookmark:_Hlk130909339"><span style="mso-bookmark:_Hlk132198942"><b>Recommendations<o:p></o:p></b></span></span></p>
<p class="paragraph" style="margin-left:.5in;text-indent:-.25in;mso-list:l1 level1 lfo3;vertical-align:baseline">
<span style="mso-bookmark:_Hlk130909339"><span style="mso-bookmark:_Hlk132198942"><![if !supportLists]><span style="font-family:Symbol"><span style="mso-list:Ignore">·<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]>Never scan a QR code from an unfamiliar source.<o:p></o:p></span></span></p>
<p class="paragraph" style="margin-left:.5in;text-indent:-.25in;mso-list:l1 level1 lfo3;vertical-align:baseline">
<span style="mso-bookmark:_Hlk130909339"><span style="mso-bookmark:_Hlk132198942"><![if !supportLists]><span style="font-family:Symbol"><span style="mso-list:Ignore">·<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]>If you receive a QR code from a trusted source via email, confirm via a separate medium -- e.g., text message, voice call, etc. -- that the message is legitimate.<o:p></o:p></span></span></p>
<p class="paragraph" style="margin-left:.5in;text-indent:-.25in;mso-list:l1 level1 lfo3;vertical-align:baseline">
<span style="mso-bookmark:_Hlk130909339"><span style="mso-bookmark:_Hlk132198942"><![if !supportLists]><span style="font-family:Symbol"><span style="mso-list:Ignore">·<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]>Stay alert for hallmarks of phishing campaigns such as a sense of urgency and appeals to your emotions -- e.g., sympathy, fear, etc.<o:p></o:p></span></span></p>
<p class="paragraph" style="margin-left:.5in;text-indent:-.25in;mso-list:l1 level1 lfo3;vertical-align:baseline">
<span style="mso-bookmark:_Hlk130909339"><span style="mso-bookmark:_Hlk132198942"><![if !supportLists]><span style="font-family:Symbol"><span style="mso-list:Ignore">·<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]>Review the preview of the QR code's URL before opening it to see if it appears legitimate. Make sure the website uses HTTPS rather than HTTP, doesn't have obvious misspellings and has a trusted domain. Don't click on unfamiliar
or shortened links.<o:p></o:p></span></span></p>
<p class="paragraph" style="margin-left:.5in;text-indent:-.25in;mso-list:l1 level1 lfo3;vertical-align:baseline">
<span style="mso-bookmark:_Hlk130909339"><span style="mso-bookmark:_Hlk132198942"><![if !supportLists]><span style="font-family:Symbol"><span style="mso-list:Ignore">·<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]>Be extremely wary if a QR code takes you to a site that asks for personal information, login credentials or payment.<o:p></o:p></span></span></p>
<p class="paragraph" style="margin-left:.5in;text-indent:-.25in;mso-list:l1 level1 lfo3;vertical-align:baseline">
<span style="mso-bookmark:_Hlk130909339"><span style="mso-bookmark:_Hlk132198942"><![if !supportLists]><span class="normaltextrun"><span style="font-family:Symbol"><span style="mso-list:Ignore">·<span style="font:7.0pt "Times New Roman"">
</span></span></span></span><![endif]>Report suspicious emails to the EI-ISAC Security Operations Center (</span></span><a href="mailto:SOC@cisecurity.org"><span style="mso-bookmark:_Hlk130909339"><span style="mso-bookmark:_Hlk132198942">SOC@cisecurity.org</span></span><span style="mso-bookmark:_Hlk130909339"><span style="mso-bookmark:_Hlk132198942"></span></span></a><span style="mso-bookmark:_Hlk130909339"><span style="mso-bookmark:_Hlk132198942">).</span><span class="normaltextrun"><o:p></o:p></span></span></p>
<p class="paragraph" style="text-align:justify;vertical-align:baseline"><span style="mso-bookmark:_Hlk130909339"><b>References:<o:p></o:p></b></span></p>
<p class="paragraph" style="margin-left:.5in;text-align:justify;text-indent:-.25in;mso-list:l2 level1 lfo6;vertical-align:baseline">
<span style="mso-bookmark:_Hlk130909339"><![if !supportLists]><span style="font-family:Symbol"><span style="mso-list:Ignore">·<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]></span><a href="https://www.inky.com/en/blog/fresh-phish-malicious-qr-codes-are-quickly-retrieving-employee-credentials"><span style="mso-bookmark:_Hlk130909339">https://www.inky.com/en/blog/fresh-phish-malicious-qr-codes-are-quickly-retrieving-employee-credentials</span><span style="mso-bookmark:_Hlk130909339"></span></a><span style="mso-bookmark:_Hlk130909339"><o:p></o:p></span></p>
<p class="paragraph" style="margin-left:.5in;text-align:justify;text-indent:-.25in;mso-list:l2 level1 lfo6;vertical-align:baseline">
<span style="mso-bookmark:_Hlk130909339"><![if !supportLists]><span style="font-family:Symbol"><span style="mso-list:Ignore">·<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]></span><a href="https://www.bleepingcomputer.com/news/security/major-us-energy-org-targeted-in-qr-code-phishing-attack/#:~:text=QR%20codes%20in%20phishing&text=The%20emails%20carry%20PNG%20or,add%20a%20sense%20of%20urgency"><span style="mso-bookmark:_Hlk130909339">https://www.bleepingcomputer.com/news/security/major-us-energy-org-targeted-in-qr-code-phishing-attack/#:~:text=QR%20codes%20in%20phishing&text=The%20emails%20carry%20PNG%20or,add%20a%20sense%20of%20urgency</span><span style="mso-bookmark:_Hlk130909339"></span></a><span style="mso-bookmark:_Hlk130909339">.<o:p></o:p></span></p>
<p class="paragraph" style="margin-left:.5in;text-align:justify;text-indent:-.25in;mso-list:l2 level1 lfo6;vertical-align:baseline">
<span style="mso-bookmark:_Hlk130909339"><![if !supportLists]><span style="font-family:Symbol"><span style="mso-list:Ignore">·<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]></span><a href="https://www.techtarget.com/searchsecurity/feature/Quishing-on-the-rise-How-to-prevent-QR-code-phishing"><span style="mso-bookmark:_Hlk130909339">https://www.techtarget.com/searchsecurity/feature/Quishing-on-the-rise-How-to-prevent-QR-code-phishing</span><span style="mso-bookmark:_Hlk130909339"></span></a><span style="mso-bookmark:_Hlk130909339">
<o:p></o:p></span></p>
<p class="MsoNormal" align="center" style="mso-margin-top-alt:6.0pt;margin-right:0in;margin-bottom:6.0pt;margin-left:.25in;text-align:center">
<span style="mso-bookmark:_Hlk130909339"><span class="normaltextrun"><b><span style="font-size:8.0pt;line-height:105%;font-family:"Times New Roman",serif;color:#FFC000;background:black;mso-highlight:black"><o:p> </o:p></span></b></span></span></p>
<p class="MsoNormal" align="center" style="mso-margin-top-alt:6.0pt;margin-right:0in;margin-bottom:6.0pt;margin-left:.25in;text-align:center">
<span style="mso-bookmark:_Hlk130909339"><span class="normaltextrun"><b><span style="font-size:8.0pt;line-height:105%;font-family:"Times New Roman",serif;color:#FFC000;background:black;mso-highlight:black">TLP:AMBER</span></b></span></span><span style="mso-bookmark:_Hlk130909339"><span class="normaltextrun"><b><span style="font-size:8.0pt;line-height:105%;font-family:"Times New Roman",serif;color:#FFC000"><o:p></o:p></span></b></span></span></p>
<p class="MsoNormal" align="center" style="mso-margin-top-alt:6.0pt;margin-right:0in;margin-bottom:6.0pt;margin-left:.25in;text-align:center">
<span style="mso-bookmark:_Hlk130909339"><span class="tlp-amber"><b><span style="font-size:8.0pt;line-height:105%;font-family:"Times New Roman",serif;color:#FFC000;border:none windowtext 1.0pt;padding:0in;background:black">UNCLASSIFIED//FOR OFFICIAL USE ONLY</span></b></span></span><span style="mso-bookmark:_Hlk130909339"><span style="font-size:9.0pt;line-height:105%"><o:p></o:p></span></span></p>
<p align="center" style="mso-margin-top-alt:6.0pt;margin-right:0in;margin-bottom:6.0pt;margin-left:.25in;text-align:center;background:white">
<span style="mso-bookmark:_Hlk130909339"><b><i><span style="font-size:8.0pt;color:#FFC000;background:white">NOTICE: The following document is not subject to disclosure as a public record pursuant to R.C. §149.433. DO NOT DISCLOSE</span></i></b></span><span class="eop"><o:p></o:p></span></p>
<p class="MsoNormal"><span class="eop"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;line-height:105%;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="border-collapse:collapse">
<tbody>
<tr>
<td style="padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><img border="0" width="110" height="108" style="width:1.1458in;height:1.125in" id="Picture_x0020_1" src="cid:image001.png@01D9F12C.DC0CC620" alt="logo for the Office of Frank LaRose Ohio Secretary of State"></span><span style="font-size:13.5pt;font-family:"Times New Roman",serif;color:black"><o:p></o:p></span></p>
</td>
<td style="padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:7.5pt;line-height:normal">
<b><span style="font-size:11.0pt;color:#004677">Jillian Burner | Chief Information Security Officer</span></b><span style="font-size:11.0pt;color:black"><br>
</span><span style="font-size:11.0pt;color:#971B2F">Office of the Ohio Secretary of State</span><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-bottom-alt:auto;line-height:normal"><b><span style="font-size:10.0pt;color:black">O:</span></b><span style="font-size:10.0pt;color:black"> 614 696 8875<br>
</span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><a href="https://ohiosos.gov/"><span style="font-size:10.0pt;font-family:"Segoe UI",sans-serif">OhioSoS.gov</span></a></span><span style="font-size:10.0pt;color:black"><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal" style="margin-bottom:0in;margin-bottom:.0001pt;line-height:normal">
<span style="font-size:11.0pt;font-family:"Calibri",sans-serif">This message and any response to it may constitute a public record and thus amy be publically available to anyone who requests it.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;line-height:105%;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;line-height:105%;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
</div>
</div>
</body>
</html>