Category: Security

Email, Security

Holiday Email Greeting Cards Bring Infections as Gifts

Nick

During this month of holidays, you can be sure that you’ll be receiving greeting cards from malicious entities.  The Swarthmore community has already been receiving emails, like the one below, containing links to retrieve a holiday greeting card that someone so thoughtfully sent (note the spelling errors): Unfortunately, the sender is someone intent on breaking into your system. Clicking on the links above will download a program that subsequently infects your system allowing remote control and access to your (and the College’s) personal data. As a general rule, NEVER click on attachments that you’re not expecting -or- URL links to … Continue reading Holiday Email Greeting Cards Bring Infections as Gifts

Email, Security

Phishing Examples

Nick

Phishing is a common experience for email users these days. Swarthmore email users often receive requests for their network/email passwords, user IDs, and other private data. Some of these emails can be very convincing and appear to be from Swarthmore ITS Staff. However, you should know that ITS will never, ever request your password!? Emails requesting your password or other personal data should simply be deleted upon receipt. Below are some different types of phishing emails received here at Swarthmore: <!–more–> Subject: Dear swarthmore.edu Email Account Owner From: Admin Help Desk Date: November 28, 2008 6:41:35 AM EST To: xxx@swarthmore.edu … Continue reading Phishing Examples

Security

Phishing via Facebook (i.e., Phacebook)

Nick

There have been numerous reports of phishing attempts this past weekend being propagated throughout Facebook. Facebook users are receiving messages that contain a link in a format similar to: tinyurl.com/….. Clicking on the link (or previewing it) will redirect you to a malicious site which impersonates the Facebook login page in an attempt to steal your Facebook credentials. In addition, many of these malicious sites will attempt to silently infect your computer. If you receive any Facebook messages like this, simply delete them without clicking on the link. In general, while making on-line life easier, tinyurl links make it far … Continue reading Phishing via Facebook (i.e., Phacebook)

Email, Security

Avoid IRS Phishing Attempts!

Nick

All you need to know is: the IRS does NOT initiate taxpayer communications through email. So, if you receive an unsolicited email from the IRS, it’s not from them!! Discard it. In addition, if you do email the IRS directly and then receive a response, keep in mind that they will – NEVER request detailed personal information through email – NEVER request information like PIN numbers, passwords, credit card numbers or other account information The IRS has a simple but informative web page with additional information about identifying and reporting phishing attempts, fake IRS web sites, etc. You can find … Continue reading Avoid IRS Phishing Attempts!

Security, Software

Serious Unpatched Security Vulnerability in Adobe Reader and Acrobat

Nick

UPDATE #2: Adobe has now released patches for versions 7, 8 and 9 of Acrobat and Reader for both Windows and Mac platforms. Please refer to the links below. Click here for Windows Click here for Mac UPDATE #1: Adobe has released version 9.1 for Windows and Mac platforms. A patch for older versions is expected on or around March 25th. If you’re running version 9, you can open your existing Adobe application and then click on ‘Check for Updates’ in the Help menu. You can also get the update directly from their website (you must already be at version … Continue reading Serious Unpatched Security Vulnerability in Adobe Reader and Acrobat