Tuesday, February 12, 2019

Identifying phishing can be harder than you think


Image of Word Cloud

Recently, our campus has been the target of a common phishing scam in which the sender impersonates a DePauw administrator, such as the University President or a Vice President. The email asks the recipient to immediately purchase multiple iTunes or other gift cards and send them the card numbers including the security code on the back.



 


How can you recognize a phishing scam?

  • The language or tone used is out of character and creates a sense of urgency. 
  • The email has an unusual From: or Reply To: address instead of an @depauw.edu address. 
  • You are asked to provide personal information, such as your username and password, social security number, date of birth, credit card, or iTunes or other gift cards. 

What should you do if you receive a message that seems suspicious?

  • Check the From: or Reply To: address carefully. 
  • Contact the sender or his/her office to verify the legitimacy of the email. 
  • Never click on any links, never open attachments, and never reply with personal information when an email seems suspicious. 
  • Forward it to HelpDesk@depauw.edu, and then click the Report spam button in your email to remove it from your inbox.
  • Go to the IT KnowledgeBase to learn more about Information Security, Phishing, and Minimizing Threats.
Go to https://phishingquiz.withgoogle.com/ for a fun phishing quiz sponsored by Google.