Latest Threats
Cyber threats evolve fast—stay in the know with our latest updates to keep your defenses strong.
How to spot a Phishing Email: The Quick Checklist
- Sender Email: Check if the domain matches the legitimate organization (e.g., “@fitnyc.edu” vs. a fake one “@fit12-school.com”).
- [EXT] External Tag: If marked [EXT], the email is coming from outside FIT. This is a signal to proceed with extra caution.
- Too Good to Be True?: Offers for high-paying jobs without interviews or experience are major warning signs.
- Urgency: Watch for pressure tactics like “respond quickly” or “deposit now.”
- Personal Info Requests: Legit employers won’t ask for sensitive data like banking info over email or text.
- Payment Requests: Be suspicious if they want you to return money or make purchases with a check they sent.
Verify Before Acting: Always check the legitimacy of the job offer by contacting the company directly through official channels. RED FLAG: the email doesn’t name the company or doesn’t appear in a web search.
Defacement of Coursicle, a scheduling App unaffiliated with FIT
What happened?We have been notified by our cybersecurity counterparts at other universities that the company Coursicle, a student course scheduling app, is experiencing an ongoing defacement of their web presence. In addition, some students who use Coursicle are receiving unexpected push notifications to their phones from Coursicle. FIT has no official affiliation or relationship with […]
Beware of Subscription Renewal Phishing Emails
What happened? We have received several reports of FIT users getting fake subscription renewal emails from reputable companies, like Norton AntiVirus and McAfee. Scammers will often try to take advantage of the new year, when email inboxes are full of promotions, receipts, and renewal notifications, hoping to catch the recipients off guard. We would like […]
Phishing campaigns target universities amid Omicron
Cybersecurity researchers have identified an increase in email phishing targeting mostly North American universities attempting to steal university login credentials. The threats typically leverage COVID-19 themes, including testing information and the new Omicron variant. Researchers believe activity will increase in the next two months as colleges and universities provide testing for students, faculty, and other […]