Return-Path: Delivered-To: teren@transocean.com Received: from vps.transocean.com by vps.transocean.com (Dovecot) with LMTP id pPV5JMkJH1k5dQAAInt2oQ for ; Fri, 19 May 2017 08:05:45 -0700 Return-path: Envelope-to: teren@transocean.com Delivery-date: Fri, 19 May 2017 08:05:45 -0700 Received: from ccm175.constantcontact.com ([208.75.123.175]:54277) by vps.transocean.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.88) (envelope-from ) id 1dBjT7-0007ps-3D for teren@transocean.com; Fri, 19 May 2017 08:05:45 -0700 Received: from [10.252.0.102] ([10.252.0.102:56110] helo=p2-jbsvcs5198.ad.prodcc.net) by 10.249.240.10 (envelope-from ) (ecelerity 4.2.1.52273 r(Core:4.2.1.11)) with ESMTP id 08/94-62366-E890F195; Fri, 19 May 2017 11:04:46 -0400 DKIM-Signature: v=1; q=dns/txt; a=rsa-sha256; c=relaxed/relaxed; s=1000073432; d=auth.ccsend.com; h=date:mime-version:subject:X-Feedback-ID:message-id:from:reply-to:list-unsubscribe:list-unsubscribe-post:to; bh=TshqG2T5wWIO1bLlm3U5blYHGYBjYkPWlKAaIob575A=; b=gBpnWQKCwg90ZDjz03CxApAiDqAPCFRhp47W9dt+PU68uWehJLecKyJhHWvvtWu02gDqPTsRDmbKWEI8MowfeIFvP8Gvn9bXLkAVEI9GangXkafxAd1rU2dt20uurNW7HNJ5tCV9YLK6W047gfC5Kpkpeq14WuGzAHU4UV9nyyQ= Message-ID: <1127965082896.1108193966131.1372556278.0.271104JL.2002@scheduler.constantcontact.com> Date: Fri, 19 May 2017 11:04:46 -0400 (EDT) From: AT-NET Services Reply-To: austin.campbell@at-net.net To: teren@transocean.com Subject: WannaCry Ransomware... It's real MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_126440917_2044286417.1495206286447" List-Unsubscribe: List-Unsubscribe-Post: List-Unsubscribe=One-Click X-Campaign-Activity-ID: 5631d55e-94ba-41e3-b923-b1248eae9b7e X-Channel-ID: b793cc90-6e29-11e6-89a3-d4ae529a863c X-Mailer: Roving Constant Contact 2012 (http://www.constantcontact.com) X-Return-Path-Hint: AVjHVXpS6QeO5I7Ekjq6bfg==_1108193966131_t5PMkG4pEeaJo9SuUpqGPA==@in.constantcontact.com X-Roving-Campaignid: 1127965082896 X-Roving-Id: 1108193966131.1372556278 X-Feedback-ID: b793cc90-6e29-11e6-89a3-d4ae529a863c:5631d55e-94ba-41e3-b923-b1248eae9b7e:1108193966131:CTCT X-CTCT-ID: b72182c0-6e29-11e6-896b-d4ae529a863c X-Spam-Status: No, score=-5.2 X-Spam-Score: -51 X-Spam-Bar: ----- X-Ham-Report: Spam detection software, running on the system "vps.transocean.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Ransomware... It's real. How long can you afford to be down? ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [...] Content analysis details: (-5.2 points, 3.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: transocean.com] -0.0 RCVD_IN_MSPIKE_H4 RBL: Very Good reputation (+4) [208.75.123.175 listed in wl.mailspike.net] -1.5 RCVD_IN_IADB_OPTIN RBL: IADB: All mailing list mail is opt-in [208.75.123.175 listed in iadb.isipp.com] -0.0 RCVD_IN_IADB_LISTED RBL: Participates in the IADB system -2.2 RCVD_IN_IADB_VOUCHED RBL: ISIPP IADB lists as vouched-for sender -0.1 RCVD_IN_IADB_SPF RBL: IADB: Sender publishes SPF record -0.0 RCVD_IN_IADB_SENDERID RBL: IADB: Sender publishes Sender ID record -0.1 RCVD_IN_IADB_DK RBL: IADB: Sender publishes Domain Keys record -0.2 RCVD_IN_IADB_RDNS RBL: IADB: Sender has reverse DNS record 0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror) 0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different -0.0 SPF_PASS SPF: sender matches SPF record -0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain 0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted Colors in HTML 0.0 HTML_MESSAGE BODY: HTML included in message -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of empty lines -0.0 RCVD_IN_MSPIKE_WL Mailspike good senders 0.0 T_REMOTE_IMAGE Message contains an external image X-Spam-Flag: NO ------=_Part_126440917_2044286417.1495206286447 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Ransomware... It's real. How long can you afford to be down? ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ AT-NET Services [http://r20.rs6.net/tn.jsp?f=001vraNl0YSuyqyumg4OgHoFEq8978G1QI2vSfhlyRUb8Iz7T-1u_w5nCAfknUbKE_0fojj6j74qEg1EBN9jZERPx97ewUQN6WNbQnbPTBdFBkywL_ZgFHHvmxWmh3mHNlvT8c_A7bWl7lBihQU21il-ZGJrkiaNy9IZuHUzAGfbUY=&c=AVIrrPVI8dBn8XH0yvMmwPh3pdXdQU-C1OHMsfOZplrSA2Og089nwQ==&ch=3cnFC2v4qQ_m4IxamGnCgT0vIeuB_qdiUpf-tvbLKTuQfbQQlqB4kA==] ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ WannaCry Ransomware ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Last Friday, a massive cyber-attack [http://r20.rs6.net/tn.jsp?f=001vraNl0YSuyqyumg4OgHoFEq8978G1QI2vSfhlyRUb8Iz7T-1u_w5nH4uWeJ_5DyuJ8CCky8xk3arBNIUOREM0XQgLJj_2enTCFJTfwSfJPmt-MvzrMrtOCCNhadFIXgref0BW12TpwHJgFE5NB87kT65eJGx-eOV46iv1tnQgqvyHVAzkWMXrPkSJ6HqzkAkUuNxLVtTBOvfQacwnGVy_35DXyyQzPPy-WKzkogxckXQqqFbZGNracAx40dapuKuZSBFsGMmDv8=&c=AVIrrPVI8dBn8XH0yvMmwPh3pdXdQU-C1OHMsfOZplrSA2Og089nwQ==&ch=3cnFC2v4qQ_m4IxamGnCgT0vIeuB_qdiUpf-tvbLKTuQfbQQlqB4kA==] spread globally in only a matter of minutes, impacting an estimated 200,000 users in 150 countries. Experts fear [http://r20.rs6.net/tn.jsp?f=001vraNl0YSuyqyumg4OgHoFEq8978G1QI2vSfhlyRUb8Iz7T-1u_w5nH4uWeJ_5DyuhyeTPlBb3WBRnzjuELhtmJ6xsfhI4OVy1V2Sxl1rhPiggv0uX48pwE_YZM9-fKm6NPhu0yhlxPDNNGN97C2JLN550SQ4dZOZ8GnZuAQ_mok4QNkhidgwALPwybjFwyoXDjOWHLfcikzvxV0ENi8j0kIWcO7-zTGxbUZ2X9wWgGyE1CyeQNVFfnEpnxuWRCwF0MfQitJC9MYNUfV33LzvLLM_cEbhAYb8hmrd01VRCTL_1qOp0Laf3SJ0Qwg04OvdFzJVc_7lipfrzWcsH2pqeEsi2RLL2jJA_NVGu8NIm4busd6NAz2qDTgAo7-wEE8FnTs7YNf-CtGdgj_PotPWRJE0q0D6_5bfRtoBiFMaBWo=&c=AVIrrPVI8dBn8XH0yvMmwPh3pdXdQU-C1OHMsfOZplrSA2Og089nwQ==&ch=3cnFC2v4qQ_m4IxamGnCgT0vIeuB_qdiUpf-tvbLKTuQfbQQlqB4kA==] that this attack is likely far from over, with an updated version of WannaCry expected in a second wave. As we learned Friday, the initial attack vector was through spam email, often under the guise of invoices, job offers and other lures sent to random email addresses. Within the email is a .zip file and once clicked, that initiates the WannaCry infection. Microsoft released a patch for this particular vulnerability in March and we recommend that everyone install this patch immediately. ***For our AT-NET Services customers*** * If you are a TechSentry customer, your updates and patches should be applied and data should be backed up. If you have any concerns, please submit a support ticket [mailto:support@at-net.net]. * If you are a customer but not in our TechSentry program, please submit a support ticket [mailto:support@at-net.net] and we will take a look at your systems. ***Remember- Your data can only be protected with a full backup, and the WORST THING YOU CAN DO IS NOTHING. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ If you see this screen above, please contact us as soon as possible. 704-831-2500 For further assistance, here is a list of our area reps: North Carolina: Joel Sosebee [mailto:joel.sosebee@at-net.net] - 704-831-2503 Kathy Sumpter [mailto:kathy.sumpter@at-net.net] - 704-831-2531 Upstate SC: Brent Amyette [mailto:Brent.Amyette@at-net.net] - 864-370-8247 Columbia/Midlands SC: John Stevens [mailto:john.stevens@at-net.net] - 803-227-2012 Charleston/Lowcountry SC: Roger Swanson [mailto:roger.swanson@at-net.net] - 843-576-3773 Price Baker [mailto:price.baker@at-net.net] - 843-576-3771 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ STAY CONNECTED: Like us on Facebook [http://r20.rs6.net/tn.jsp?f=001vraNl0YSuyqyumg4OgHoFEq8978G1QI2vSfhlyRUb8Iz7T-1u_w5nAb2Qb1h39FLdaRRST-uojPkzDvDtwM_6Th4gJPhcXbbWOz-rl_4Md2v7S0BdqOUk7gcfZia13Yr5kLF1WSh2N29RyrkjNEsT029CUMmsOMSZXgGcoCP3D3C5wcG0PWyz8OsTT98Ht8JlWnubE6wIPE=&c=AVIrrPVI8dBn8XH0yvMmwPh3pdXdQU-C1OHMsfOZplrSA2Og089nwQ==&ch=3cnFC2v4qQ_m4IxamGnCgT0vIeuB_qdiUpf-tvbLKTuQfbQQlqB4kA==] Follow us on Twitter [http://r20.rs6.net/tn.jsp?f=001vraNl0YSuyqyumg4OgHoFEq8978G1QI2vSfhlyRUb8Iz7T-1u_w5nH4uWeJ_5DyuaFyoB7aQbO8a1pvx66defmV4r5E4kkaoRJlJe4EPhFqf28lxlHXCDvyyuTrFlrYT8IyjWgDXFDXQSgszHUSXOWfxWKWzphegVGd9_b_uTIGjEdnnCnn7dR8rkHPd8Z32Rg_kdbs3HbY=&c=AVIrrPVI8dBn8XH0yvMmwPh3pdXdQU-C1OHMsfOZplrSA2Og089nwQ==&ch=3cnFC2v4qQ_m4IxamGnCgT0vIeuB_qdiUpf-tvbLKTuQfbQQlqB4kA==] View our profile on LinkedIn [http://r20.rs6.net/tn.jsp?f=001vraNl0YSuyqyumg4OgHoFEq8978G1QI2vSfhlyRUb8Iz7T-1u_w5nEjfxdx2OyklHEqQ4Y5MFQZmpcYnbDu50JOWpJso_w3UbpdvAUy13ReNI2F8vALFWxgo9szf1RQ3jIrhKow_lAJbiffAfg6KDz_lSB51gVresGmmAwK4Vlj6e7ipHbIG8TpXaV5C3to1-SaB8vOLYNB-fwzEfDoGhQ==&c=AVIrrPVI8dBn8XH0yvMmwPh3pdXdQU-C1OHMsfOZplrSA2Og089nwQ==&ch=3cnFC2v4qQ_m4IxamGnCgT0vIeuB_qdiUpf-tvbLKTuQfbQQlqB4kA==] ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Forward this email http://ui.constantcontact.com/sa/fwtf.jsp?llr=tb5dyciab&m=1108193966131&ea=$teren@transocean.com$&a=1127965082896 This email was sent to teren@transocean.com by austin.campbell@at-net.net. Update Profile/Email Address https://visitor.constantcontact.com/do?p=oo&m=001ixfsTbPBYzXFoaUwzqsebQ%3D%3D&ch=b793cc90-6e29-11e6-89a3-d4ae529a863c&ca=5631d55e-94ba-41e3-b923-b1248eae9b7e Instant removal with SafeUnsubscribe(TM) https://visitor.constantcontact.com/do?p=un&m=001ixfsTbPBYzXFoaUwzqsebQ%3D%3D&ch=b793cc90-6e29-11e6-89a3-d4ae529a863c&ca=5631d55e-94ba-41e3-b923-b1248eae9b7e Privacy Policy: http://www.constantcontact.com/legal/service-provider?cc=about-service-provider Online Marketing by Constant Contact(R) www.constantcontact.com AT-NET Services | 9625-D Southern Pine Blvd | Charlotte | NC | 28273 ------=_Part_126440917_2044286417.1495206286447 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable <= div style=3D"display:none;display:none !important;color:transparent;line-he= ight:1px;max-height:0px;max-width:0px;opacity:0;overflow:hidden;visibility:= hidden;height:0;width:0;mso-hide:all;font-size:0px;" id=3D"preheaderContent= ">Can you afford to be down for a week?
3D""
3D""
Ransomware... It's real.  How = long can you afford to be down?
3D""
WannaCry Ransomware
Last Friday, a massive cyber-attack spread globall= y in only a matter of minutes, impacting an estimated 200,000 users in 150 = countries.

Experts fe= ar that this attack is likely far from over, with an updated versi= on of WannaCry expected in a second wave.
 
As we learned Friday, the initial attack vector was through spam= email, often under the guise of invoices, job offers and other lures sent = to random email addresses. Within the email is a .zip file and once clicked= , that initiates the WannaCry infection. Microsoft r= eleased a patch for this particular vulnerability in March and we = recommend that everyone install this patch immediately.

***For our AT-NET Services customers***

  • If you are a TechSentry customer, your updates and patches sh= ould be applied and data should be backed up.  If you have any concern= s, please submit a support ticket.
  • If you are a customer but not in our TechSentry program, please sub= mit a support ticket and we will take a look at your = systems.
***Remember- Your data can only be protected with a full backu= p, and the WORST THING YOU CAN DO IS NOTHING.

3D""
3D"Ransomware
3D""
<= em>If you see this screen above, please contact us as soon as possible.

704-831-2500

For further assistance, here is a list of our area reps:=

North Carolina:

Joel Sosebee - 704-831-2503
Ka= thy Sumpter - 704-831-2531

Upstate SC:

Brent Amyette - 864-370-8= 247

Columbia/Midlands SC:

= John Stevens - 803-227-2012

Charleston/Lowcountry SC:

R= oger Swanson - 843-576-3773
Price Baker=  - 843-576-3771
3D""
STAY CONNECTED:
3D"Like
<= /table>
3D"Follow
3D"View
3D""
AT-NET Services, 9625-D Southern Pine Blvd, = ;Charlotte, NC 28273
SafeUnsubscribe™ t= eren@transocean.com
Forward this email | Update Profile | About our service pr= ovider
<= /tr>
Sent by austin.campbell@at-net.net in collaboration with
<= tr>
3D"Constant
------=_Part_126440917_2044286417.1495206286447--