We’ve been advised by SUNY’s information security team that cybercriminals are leveraging the recent tragedies in New Zealand and Ethiopia as pretexts for email phishing attacks. Unfortunately, hackers will take any advantage of incidents like these to steal money and information, and/or plant malware. (Please see our similar advisory from last September regarding phishing attacks based […]
What happened? Recently one of the other SUNY campuses experienced a spear phishing attack (personalized phishing attacks that appear to be from a trusted source). The attacker sent an email purporting to be from the institution’s president regarding a new business integrity program. The emails had the correct branding and trademarks of the institution and […]
What happened? A sophisticated email phishing scam targeting SUNY students is currently active. In this latest scam, the attacker pretends to represent a college IT department, sending an alert that claims that recent system maintenance caused them to lose student user IDs and passwords. The email includes a link for the student to re-enter their […]
Don’t give cybercriminals the gift of an easy target this holiday season. Stay off the cybersecurity naughty list by avoiding falling for these scams: Phony Shipping Status Emails You are likely expecting more package deliveries this time of year a fact cybercriminals seek to exploit by sending fake shipment and delivery notification emails and text […]
Cybercriminals are increasingly targeting you through your smartphone. Attackers send texts that trick you into doing something against your own best interest. This type of security attack is called SMiShing, short for “SMS phishing” trick the target into downloading a Trojan horse, virus or other malware onto their cellular phone or other mobile devices or trick the target into revealing […]
Yesterday, you may have received invitations in either your FIT or personal Gmail accounts to share a Google Drive document from a recognizable name at FIT, mailing list you belong to, or personal contact. This was a nationwide email phishing scam that lured the reader to click on an “Open in Docs” button. When individuals […]
The Scam Many individuals have reported receiving emails that say “FIT Persons Name” has invited you to view the following document followed by an Open in documents button. This email is a phishing scam. When an individual clicks the link they will be redirected to a fake Google permission page if they click allow they grant […]
An email spoofing FIT’s TechHelp was sent to some employees, who correctly identified the message as a Phishing attempt. If you received an email with the Subject: ALERT: Email Scams at FIT, do not click on the links and report the email as Phishing. The email is not from the Division of Information Technology. If you […]
FIT and other SUNY campuses have recently seen a number of spoofed requests to open documents in Dropbox. The requests come in email and appear to come from legitimate FIT email addresses, but the “sender” is not someone who would communicate with you over Dropbox and the subject line is blank or nonsensical. The phish […]
How the Phishing attack works The newest phishing scam is so “efficient” that many experienced technical users have reported falling for it. The scam tricks Gmail users into revealing their login credentials.The phishing attack starts with an email that contains what appears to be an attached PDF document, but is, in reality, an embedded image […]