<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-ligatures:standardcontextual;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:307129100;
mso-list-template-ids:-142963848;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1
{mso-list-id:1975062213;
mso-list-template-ids:-2040496616;}
@list l1:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Please see the phishing alert below from CISA.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="mso-ligatures:none">Brian Hoehner<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-ligatures:none">Director of Operations<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-ligatures:none">Miami Valley Educational Computer Association (MVECA)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-ligatures:none">937-767-1468 x3119<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-ligatures:none"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-ligatures:none"><img width="183" height="67" style="width:1.9062in;height:.6979in" id="_x0000_i1031" src="cid:image007.jpg@01DA58EB.FF47DEF0"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="mso-ligatures:none">From:</span></b><span style="mso-ligatures:none"> MS-ISAC Advisory <MS-ISAC.Advisory@msisac.org>
<br>
<b>Sent:</b> Monday, February 5, 2024 3:04 PM<br>
<b>To:</b> MS-ISAC SOC <SOC@msisac.org><br>
<b>Subject:</b> Message from the MS-ISAC: Spear Phishing Targeting K-12 Transportation Administrators - TLP: AMBER<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="border:solid black 3.0pt;padding:0in 0in 0in 0in">
<p class="MsoNormal" style="background:red"><b><span style="font-family:"Arial",sans-serif;color:yellow;mso-ligatures:none">CAUTION:</span></b><span style="font-family:"Arial",sans-serif;color:white;mso-ligatures:none"> This email originated from outside of
the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><b><span style="font-family:"Arial",sans-serif">TLP: AMBER</span></b><o:p></o:p></p>
<p class="MsoNormal"><b><span style="font-family:"Arial",sans-serif"> </span></b><o:p></o:p></p>
<p class="MsoNormal"><b><span style="font-family:"Arial",sans-serif">DATE: February 5, 2024</span></b><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif">CISA has received a tip from a trusted third party regarding a spear phishing campaign targeting K-12 transportation administrators. The unknown threat actor has been seen sending fake Department
of Transportation forms requesting that drivers update their information. These forms are prefilled with publicly available information to appear legitimate.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif">The emails may potentially be sent from trinitymarshall[.]net email addresses, a network associated with these spear phishing emails, but may be sent by other sources.
</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif">To report incidents and anomalous activity, please contact either of the following organizations: </span><o:p></o:p></p>
<ul style="margin-top:0in" type="square">
<li class="MsoNormal" style="mso-list:l1 level1 lfo3"><span style="font-family:"Arial",sans-serif">CISA’s <a href="https://www.cisa.gov/forms/report" title="Incident Reporting System">Incident Reporting System</a> or through the agency’s 24/7 Operations Center
at <a href="mailto:report@cisa.gov" title="Report to CISA">report@cisa.gov</a> or (888) 282-0870.</span><o:p></o:p></li><li class="MsoNormal" style="mso-list:l1 level1 lfo3"><span style="font-family:"Arial",sans-serif">MS- and EI-ISAC, through their
<a href="https://www.cisecurity.org/isac/report-an-incident">24/7 Operations Center</a> at
<a href="mailto:soc@msisac.org">soc@msisac.org</a> or (866) 787-4722.</span><o:p></o:p></li></ul>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif;mso-ligatures:none;mso-fareast-language:JA">Multi-State Information Sharing and Analysis Center (MS-ISAC)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif;mso-ligatures:none;mso-fareast-language:JA">Elections Infrastructure Information Sharing and Analysis Center (EI-ISAC)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif;mso-ligatures:none;mso-fareast-language:JA">31 Tech Valley Drive</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif;mso-ligatures:none;mso-fareast-language:JA">East Greenbush, NY 12061</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif;mso-ligatures:none;mso-fareast-language:JA"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif;mso-ligatures:none;mso-fareast-language:JA">24x7 Security Operations Center</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif;mso-ligatures:none;mso-fareast-language:JA"><a href="mailto:SOC@cisecurity.org">SOC@cisecurity.org</a> - 1-866-787-4722</span><o:p></o:p></p>
<p class="MsoNormal"><a href="https://www.cisecurity.org/isac/"><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:windowtext;mso-ligatures:none;mso-fareast-language:JA;text-decoration:none"><img border="0" width="300" height="80" style="width:3.125in;height:.8333in" id="Picture_x0020_7" src="cid:image001.png@01DA5844.101E1BC0"></span></a><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Arial",sans-serif;mso-ligatures:none;mso-fareast-language:JA"> </span><a href="https://www.linkedin.com/company/the-center-for-internet-security/"><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:windowtext;mso-ligatures:none;mso-fareast-language:JA;text-decoration:none"><img border="0" width="38" height="38" style="width:.3958in;height:.3958in" id="Picture_x0020_8" src="cid:image002.png@01DA5844.101E1BC0"></span></a><span style="font-size:12.0pt;font-family:"Arial",sans-serif;mso-ligatures:none;mso-fareast-language:JA"> </span><a href="https://twitter.com/CISecurity"><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:windowtext;mso-ligatures:none;mso-fareast-language:JA;text-decoration:none"><img border="0" width="38" height="38" style="width:.3958in;height:.3958in" id="Picture_x0020_9" src="cid:image003.png@01DA5844.101E1BC0"></span></a><span style="font-size:12.0pt;font-family:"Arial",sans-serif;mso-ligatures:none;mso-fareast-language:JA"> </span><a href="https://www.facebook.com/CenterforIntSec"><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:windowtext;mso-ligatures:none;mso-fareast-language:JA;text-decoration:none"><img border="0" width="38" height="38" style="width:.3958in;height:.3958in" id="Picture_x0020_10" src="cid:image004.png@01DA5844.101E1BC0"></span></a><span style="font-size:12.0pt;font-family:"Arial",sans-serif;mso-ligatures:none;mso-fareast-language:JA"> </span><a href="https://www.youtube.com/user/TheCISecurity"><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:windowtext;mso-ligatures:none;mso-fareast-language:JA;text-decoration:none"><img border="0" width="38" height="38" style="width:.3958in;height:.3958in" id="Picture_x0020_11" src="cid:image005.png@01DA5844.101E1BC0"></span></a><span style="font-size:12.0pt;font-family:"Arial",sans-serif;mso-ligatures:none;mso-fareast-language:JA"> </span><a href="https://www.instagram.com/cisecurity"><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:windowtext;mso-ligatures:none;mso-fareast-language:JA;text-decoration:none"><img border="0" width="38" height="38" style="width:.3958in;height:.3958in" id="Picture_x0020_12" src="cid:image006.png@01DA5844.101E1BC0"></span></a><o:p></o:p></p>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif;mso-ligatures:none;mso-fareast-language:JA"> </span><o:p></o:p></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;mso-ligatures:none;mso-fareast-language:JA">TLP: AMBER</span></b><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;border:none windowtext 1.0pt;padding:0in;mso-ligatures:none;mso-fareast-language:ZH-CN"><a href="https://www.cisa.gov/tlp">https://www.cisa.gov/tlp</a>
</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;mso-ligatures:none;mso-fareast-language:JA">Limited Disclosure, restricted to participants' organizations. Recipients may only share TLP: AMBER information with members of their
own organization, and with clients or customers who need to know the information to protect themselves or prevent further harm.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;mso-ligatures:none;mso-fareast-language:JA"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;border:none windowtext 1.0pt;padding:0in;mso-ligatures:none;mso-fareast-language:ZH-CN">Please send all opt out requests to
<a href="mailto:info@cisecurity.org">info@cisecurity.org</a>. </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;border:none windowtext 1.0pt;padding:0in;mso-ligatures:none;mso-fareast-language:ZH-CN"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black;border:none windowtext 1.0pt;padding:0in;mso-ligatures:none;mso-fareast-language:JA">This message and attachments may contain confidential information. If it appears
that this message was sent to you by mistake, any retention, dissemination, distribution or copying of this message and attachments is strictly prohibited. Please notify the sender immediately and permanently delete the message and any attachments.</span><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><span style="mso-ligatures:none">This message and attachments may contain confidential information. If it appears that this message was sent to you by mistake, any retention, dissemination, distribution or copying of this message and attachments
is strictly prohibited. Please notify the sender immediately and permanently delete the message and any attachments.
<br>
<br>
. . . . . <o:p></o:p></span></p>
</div>
</div>
</body>
</html>