Information Security
FIT is Cybersafe is FIT’s campaign for cybersecurity for our community.
Cyberattacks, identity theft, and online scams are all over the news lately. A school might not seem like a likely target, but colleges, along with other institutions, are increasingly in the cross-hairs of global cybercriminals. College databases hold a lot of personal information about students and employees that can be valuable to hackers.
Many attacks against institutions like FIT succeed because of something a community member did (clicking on something they shouldn’t) or didn’t do (use a strong password). That’s why we’re starting a campaign to make everyone aware of what they can do to stay cybersafe. We’ll provide tips, training, and online resources and members of our security team will be at campus events to promote awareness and answer questions. And remember the same practices that protect you at FIT protect you at home.
Be aware—and Be Cybersafe!
Two Factor Authentication (2FA) at FIT
Due to the rising levels of cyberattacks that have been so visible in the media, it is important that FIT and the FIT community take the necessary steps to better protect the college and its data from cyber harm or theft.
Two-Factor Authentication (2FA) also known as 2-Step Verification, or multi-factor authentication requires a user to present two or more pieces of evidence to authenticate (verify their identity) before they are granted access to an application.
Recent Posts
Beware of Fake Text Messages
We received a report of an FIT alumnus who received a text message from someone pretending to a high level executive at FIT. We want to alert you of the dangers of smishing (text message phishing) and to remind you that official college communication is never sent in the form of a text message.“SMS” phishing […]
Beware of blank subject lines in emails
We have received reports of some FIT employees receiving emails with blank subject lines or one character subject lines with no content in the body of the email. Cybersecurity researchers have reported that blank, unsolicited emails are often an early sign of a potential future phishing attack. Cyber gangs will often put feelers out to […]
Tax Refund Phish
What happened?Over the weekend and this morning, FIT (and many of our peer SUNY campuses) received emails from several senders all purporting to represent the IRS, with a subject line of “Recalculating Your Tax Refund Payment.” The emails contained a click button that brings users to a site that looks like an IRS.gov site, but […]
Review Past Threats
Cybercriminals often reuse or create a variation of past scams, read through our threat archives to learn more about how to stay Cybersafe.
Recent CISO Updates
Beware of Free File Converters
The FBI has recently issued a warning about an increase in scam websites that offer free online file conversion services. Rather than providing genuine conversions, these sites often download malware onto victims’ computers. The FBI emphasized the risk of malware leading to ransomware attacks and the installation of browser hijackers […]
Reminder: Sign Up for SSPR for your FIT User Account
Attackers frequently target help desks to gain unauthorized access to user accounts. This is achieved through social engineering tactics, where scammers impersonate legitimate users and request password resets. Scammers will fabricate scenarios that require immediate password resets. They often use urgency or authority to pressure help desk personnel into bypassing […]
Beware of Preauthorized Purchase Scams
Preauthorized purchase scams involve fraudsters posing as representatives from well-known retailers like Walmart, Amazon, or Apple. They falsely claim a large unauthorized purchase has been made on the victim’s account, often creating a sense of urgency to pressure them into action. “A preauthorized purchase of an Apple MacBook Pro and […]
Self-Service Articles
