Tag Archives: Information Security

Information Security and Phishing

For the fall of 2024, it is expected that approximately 20.7 million students will attend U.S. universities. This influx of students, faculty, and staff returning for the academic year presents increased opportunities for cybercriminals, who often exploit the busy start of the school year to launch their attacks​ (EdTech Magazine)​ (Proofpoint).

Phishing Attacks: Phishing attacks continue to be a significant threat, accounting for 36% of all data breaches in 2023. Currently, about 1.2% of all emails sent globally, which equates to nearly 3.4 billion emails per day, are malicious. This makes phishing one of the most prevalent cybersecurity threats, with educational institutions being particularly vulnerable due to their large and varied user bases​ (Proofpoint)​ (Pixel Privacy).

Protective Measures: To mitigate the risk of falling victim to these attacks, it is crucial to adopt robust cybersecurity practices:

  1. Be cautious of emails claiming urgency.
  2. Verify the sender’s email address.
  3. Watch for suspicious logos, signatures, or content.
  4. Check URLs before clicking; ensure they lead to official, encrypted sites.
  5. Think twice before opening attachments or clicking on links.
  6. Use different passwords for work, school, and personal accounts, and keep them secure.
  7. Regularly update devices, apps, browsers, and antivirus software.
  8. Delete sensitive information that is no longer needed.
  9. Backup your files regularly.

Common Scams Targeting Students: College students should be aware of common scams, including:

  • Fake emails offering “Part-Time” work.
  • Fake emails with “important information about your account” or issues with registration.
  • Tech support scams claiming issues with your computer.
  • Fake scholarship or textbook rental scams.
  • IRS scams demanding payment for a fake “federal student tax.”
  • Tuition reimbursement or student debt cancellation scams.
  • Requests for login information, passwords, or personal data.
  • Fake friend requests and misleading messages about shared documents.

These precautions and awareness can help protect against the growing wave of phishing and other cyberattacks targeting educational institutions and their communities​ (Pixel Privacy)​ (identitytheft).

Information Security and Phishing

Nearly 20 million students in the US are expected to attend universities this fall. 

This is an exciting time for Simmons as our students, faculty, and staff return for the academic year. Unfortunately, the return to school provides ample opportunities for cybercriminals who wish to take advantage of people during these particularly busy times.

Phishing attacks are once again on the rise, accounting for more than 20% of data breaches in 2021[1]. It is estimated that one in every 99 messages (1.2%)[2] is malicious which equates to nearly 3.4 billion fake emails per day.

Luckily there are some healthy security practices that we all can take to reduce risk:

  • Beware of email messages claiming to be of an urgent nature.
  • Pay attention to the sender of the email message.
  • Look out for fake logos, signatures, or suspicious message contents.
  • Check those URLs; only visit official, reputable websites with encryption.
  • Think twice before clicking links or opening attachments.
  • Protect your passwords and use different passwords for your work, school, and personal accounts.
  • Keep your machine clean. 
  • Make sure that all of your devices, apps, browsers, and antivirus software are up-to-date.
  • Delete sensitive information if you no longer need it.
  • Back-up your files regularly. 

Be mindful of common scams targeting college students, including:

  • Emails that contain “important information about your Simmons account” or a “problem with your registration”
  • Tech Support scams where you get a call about a “problem with your computer”
  • Scholarship scams, textbook rental or book-buying scams.
  • IRS scams demanding money for a fake “federal student tax”
  • Tuition reimbursement or student debt cancellation scams
  • Messages asking for your login information, passwords, or other personal information
  • Fake friend requests, fake login pages, and fake DropBox or Google Docs share notices.

Thank you for your continued cooperation supporting your information security and online safety!  For more information about phishing and Internet scams, as well as ways to identify them, please visit our Phishing and Scams resource page

Please send any questions or concerns to the Technology Service Desk.  

[1] Verizon 2021 Data Breach Investigations Report (https://www.verizon.com/business/resources/reports/dbir/)
[2] Valimail Email Fraud Landscape Spring 2019 Report (https://valimail.docsend.com/view/qndhuhn)

October is CyberSecurity Awareness Month

Cybersecurity & Infrastructure Security Agency Logo

See Yourself in Cyber. #BeCyberSmart.

Even though cybersecurity may seem like a complex subject, ultimately, it’s really all about people. This month we focus on the “people” part of cybersecurity, providing information and resources to help everyone make smarter decisions whether on the job, at home, or at school. 

4 Things You Can Do to #BeCyberSmart

About Your Role

When we say See Yourself in Cyber, we mean see yourself in cyber no matter what role you play. As an individual or consumer, take steps to protect your online information and privacy. Faculty, staff, and service providers can take ownership of their role by putting cybersecurity in place to prevent incidents while protecting the University’s brand and reputation. Administrators support critical operations and are a part of the network of functions and systems that others rely on.

Remember: your role plays an important part in ensuring cybersecurity for the larger ecosystem!