TechTalk_4th

28-29 / 42

ALERT!
Staff Fall Prey to Phishing Attacks
When you receive email with embedded web links, think twice before clicking on a link.
Is the email or website asking you to login or to validate your username and password? Does the link
take you to a website different than indicated by the link in the email message?
BE SUSPICIOUS!
If it is a link to a known application such as Office 365 or the campus Portal system, instead of clicking
on the link, go to the site by manually entering the web address (e.g., ). Do not
click on the link.
If it is an unknown website or service, consider contacting the service or website to validate the request.
Don’t click on the link. Google the service and find their main website for contact information. Over
the last few weeks, staff have received numerous emails attempting to obtain their username and
password. Known as phishing schemes, these messages are designed to look like legitimate alerts,
normally suggesting dire consequences if you do not respond or take action. See the example below:
Dear Member,
Access To Your Southeast Missouri State University Webmail Account Will Expire Today 01/23/2017
Best Regards,
Looks credible, but if you were to click on the link, you would be taken to a completely different website
(not ) again posing as a legitimate request for you to login or enter personal information,
designed to collect usernames and passwords, or in some cases SSNs or financial information.
Do not be fooled. If instead, you were to manually type in that same web address into a browser
– , you would receive an error stating the page does not exist.
Once one individual falls prey to a phishing scheme, that same scheme will now use that individual’s
credentials to send more phishing email. These emails now appear to come from a legitimate sender
and in some cases may even by-pass security filters. It is a vicious and disruptive cycle.
In response, IT staff have been closely monitoring email services; stepping up our security controls
to catch the spam as early as possible; resetting compromised accounts; and cleaning up tens of
thousands of queued spam email messages. We are working hard to keep email safe and functional, but
we need your assistance. If you have any questions, contact the IT Help Desk at (573) 651-4357 or email
- Floyd Davenport, AVP
WE NEED YOUR HELP!
Email:
“10-Second EMAIL Rule” where
EMAIL stands for “examine
message and inspect links.” from
28 29