Phishing Awareness

The day to give thanks for all our bountiful blessings is quickly approaching this month. As we all give thanks for the myriad of spiritual, social, and economic fortunes, there are some who are more thankful for what they’ve obtained from unsuspecting and falsely led victims: information for their economic gain. 

How were these people falsely led? These malicious actors generally disguise themselves as legitimate senders that you may know. These false acquaintances may even masquerade as senders you may know through phone calls, text messages, or even snail mail too.

Malicious actors never seem to stop at trying to acquire information from unsuspecting people. Their messages, most of the time, seem innocent. And other times, their messages try to frighten you into immediately acting to secure your account or divulge information to them.

Do not click on their link, open their attached file, or reply to their message if you are unsure whether you have received a phishing email. Key ways to identify a phishing email include:

• The sender’s email address looks right, BUT it contains extra characters and/or misspellings
• Misspellings and/or use of bad grammar within either the Subject Line or anywhere in the message body
• Addresses you with generic terms such as “Mr.”, “Ms.”, or “Dear Customer”, instead of by your name
• The message warns that if you do not take immediate action by clicking on the link and entering personal details and/or payment information then you will ‘lose out’
• The message promises refunds, extra coupons, or other freebies after the purchase
• The message is from someone not in the position to ask for your/or your students information

If you determine that it is a malicious cyber actor trying to obtain your information for their Phishgiving, do not simply delete the email, but report it instead. By reporting the phishing email it not only pulls the email from your inbox, it also pulls the email from others here on campus who may have received it too.