January 12, 2015 – College students across the United States have been targeted to participate in work-from-home scams. Students have been receiving e-mails to their school accounts recruiting them for payroll and/or human resource positions with fictitious companies. The “position” simply requires the student to provide his/her bank account number to receive a deposit and… Continue Reading
Security Notices
College Employee Scam
January 12, 2015 – College and University employees are receiving fraudulent e-mails indicating a change in their human resource status. The e-mail contains a link directing the employee to login to their human resources website to identify this change. The website provided appears very similar to the legitimate site in an effort to steal the… Continue Reading
University Direct Deposit Account Credentials Targeted by Phishing Emails
In at least three separate incidents in 2014, malicious actors sent phishing emails with malicious links to University employees; employees who clicked on the link were taken to fraudulent websites that collected single sign-on credentials, which were used to modify the employee’s direct deposit account information. By changing this information, the malicious actors rerouted the… Continue Reading
Tech Support Call Scam Leads to Malware & Financial Loss
Tech Support Call Scam Leads to Malware & Financial Loss The Risk: Malicious actors use call centers to cold call victims in an attempt to gain access to the victim’s computer, install malware, steal personally identifiable information (PII), and receive monetary gain. The Threat: A malicious actor, claiming to work for a well-known software, technology,… Continue Reading
Security breach at EDUCAUSE
Many of you received a message this afternoon from EDUCAUSE detailing a server breach that may have exposed your EDUCAUSE website profile password. This message originally triggered many phishing email scam filters but, unfortunately, this message is accurate and the incident occurred as described. Please follow the instructions provided in that email to reclaim access… Continue Reading