Criminals seeking to steal identities are abusing the U.S. Postal Service’s Informed Delivery, a service that allows you to digitally preview your mail and manage package delivery. The scam takes advantage of the weak verification method used by USPS to authenticate new customers; USPS uses information available on websites like spokeo.com, zillow.com, and social media […]
Cybercriminals often try to capitalize on the outpouring of support for those impacted by natural disasters to trick those seeking to help to reveal private information or downloading malicious software. Numerous scams are circulating via email and social media from cyberattackers hoping to take advantage of people looking to help those affected during hurricane season. […]
Several “summer job opportunity” fliers have been spotted around campus. This multi-level marketing company did not have permission to post their fliers on campus. IT would like to take this as an opportunity to remind the FIT community that cyber criminals also try to take advantage of college students looking for work, wanting to make […]
What happened? SUNY is reporting that many campuses are experiencing a phishing attack. At least one person at FIT was targeted. This attack is particularly clever in that clicking the infected link or button in the email redirects you to a site that harvests email addresses and subject lines in your email account, and uses […]
What happened? We’ve been made aware of a phone scam targeting students at other SUNY campuses where criminals are impersonating SUNY Admissions or other administrative offices and asking for sensitive information. To give the appearance of credibility these attackers are also using a technique called “caller ID spoofing” to make it appear that the call […]
What happened? There has been a reported increase in the number of government employees reporting “sextortion” hoax emails throughout the country and we’ve had at least one report at FIT this week. In this phishing scam the perpetrator threatens to release compromising webcam footage if the victim does not pay a ransom. This is another […]
Your phone rings and the Caller ID displays “911”. You answer it immediately because “911” is synonymous with emergencies. The operator tells you that someone close to you has been a severe accident. You are very shaken and concerned. The operator proceeds to ask you several personal questions to help them with the care of […]
What happened? “Malspam” is short for malware spam—a word to describe any malware that is delivered via email. A malspam campaign that is currently circulating mimics a FedEx shipping confirmation with a person’s real name, Social Security number, and a “tracking number.” Victims that click on the link will be redirected not to a FedEx […]
What happened? Recently one of the other SUNY campuses experienced a spear phishing attack (personalized phishing attacks that appear to be from a trusted source). The attacker sent an email purporting to be from the institution’s president regarding a new business integrity program. The emails had the correct branding and trademarks of the institution and […]
Cybercriminals have historically used high-profile events, such as the Olympic Games, to disseminate malware and conduct scams, fraud, and cyber-espionage. It is highly likely that cybercriminals will recycle old tactics such as Olympic-themed phishing emails, malvertising, and malicious mobile apps, as well as develop new methods to compromise target devices and accounts. Similar campaign tactics […]