IT Security: Don't Go Phishing

NEVER: reveal your username & password. Does this phrase sound familiar? 

With evolving phishing attempts in the virtual world, it’s more important than ever to take precautions against security breaches within the University network. Phishing is the practice of using email to convince users that the message is legitimate and to disclose personal information. Phishing scams hit the University on a regular basis, and they are getting more credible every year.  IT Security has posted credible phishing attempts which have occurred on campus on the IT Security webpage for members of the campus community to view.

IT Security encourages individuals to check the webpage before notifying the IT Help Center if they believe they have been targeted by a phishing attempt. IT Security is notified when a new attempt is spotted at which point they will post the phishing email onto the IT Security webpage for others to view. The team also blocks the “Reply-To address” so the scammer no longer receives mail from the University of Guelph. Compromised accounts are locked until the person speaks directly with IT Security. In addition to these reactionary initiatives, IT Security is also proactive in raising awareness for faculty, staff, and students about the dangers of internet phishing and hacking. The department has spread awareness through the Office of Student Affairs, by placing notes within welcome packets for new students, and through an informative presentation at the Community Breakfast.

Reporting to the CIO, IT Security has university-wide responsibility and has a strong partnership with CCS, but is not a part of CCS. The IT Security Office wants users to feel comfortable and safe working online using campus networks.  IT Security offers several services including full disk encryption to secure personal computers, laptops or portable storage devices which hold sensitive data. They also conduct vulnerability assessments on a weekly basis to notify system administrators of the weaknesses in their systems and how to correct those weaknesses. In addition to these services, the Office is excited that President Summerlee has approved the formal IT Security framework on campus. Learn more at the IT Security website.