Campus alerts!

We are seeing the following cyber attacks on campus:

• Another job scam hits inboxes
• Sneaky fake staff assessment spoofs an MRU email address
• Attacker sends an email too large to be displayed

Stop and think before you click.

Announcements

• A new cybersecurity awareness training platform is coming. If you want to complete your training on the current platform, you can do so until the end of day on Sunday, March 9.

Threats that may affect you

• Zacks Investment Research data breach
• StorEnvy data breach
• How AI-driven identify fraud is causing havoc

Cybersafety tip of the week

Ten tips on using public computers safely

To use public computers securely, always log out of accounts, disable autocomplete and password saving, and avoid leaving sensitive data visible. After use, erase your browsing history and any temporary files, and then reboot the computer. Be cautious of people watching you and avoid entering sensitive information. In addition, consider using a temporary email or portable software on a USB drive for added security. If necessary, change passwords after using a public computer to further protect your accounts.

Read the whole article.

Campus alerts!

We are seeing the following cyber attacks on campus:

• Document review appears to come from HR
• Yet another attacker tries to impersonate Docusign
• Fake Disney+ subscription renewal debuts
• Another Docusign impersonator hits inboxes
• Attacker uses email marketing tool to send fake invoice
• Incompetent scammer fails at impersonating Tim Rahilly
• Scammer make a sad attempt to impersonate Amazon
• Attacker forgets to use spellcheck in Sharepoint phish

Stop and think before you click.

Announcements

• A new cybersecurity awareness video is coming to your inbox on Friday. Watch the video and be entered into the Random Acts of Cybersecurity draw. 

Threats that may affect you

• Energy-saving scam uses Elon Musk’s name
• Hundreds of fake Reddit sites push Lumma Stealer malware 
• The world’s most invasive apps are collecting information they don't need
• Avery data breach included credit card information
• LandAirSea data breach

Cybersafety tip of the week

Why rebooting your phone daily is your best defense against zero-click hackers

Spyware tools have increasingly targeted journalists, activists and politicians, raising concerns about mobile security. WhatsApp recently uncovered a hacking campaign affecting 90 users, linked to Israeli spyware company Paragon Solutions. Their spyware, Graphite, uses zero-click attacks to infiltrate devices via malicious PDFs. Experts warn that mobile spyware is becoming widespread and profitable. Users should reboot devices regularly and use security tools to mitigate risks. 

Read the whole article.

Campus alerts!

We are seeing the following cyber attacks on campus:

• Job scammer forgets the email subject
• Wells Fargo impersonator uses a document share as bait
• Marketing email masquerading as Docusign
• Scammer hijacks a Quickbooks account to send a fake invoice
• Fake McAfee subscription renewal arrives in inboxes, again
• Scammer impersonates a communications company

Stop and think before you click.

Announcements

• Register for the Protecting Yourself Against Cybercrime workshop on Thursday, Feb. 6.
• Congratulations to Rob Platt, the January winner of the Random Acts of Cybersecurity draw. Rob won for answering the Random Acts of Cybersecurity monthly question. Answer this month's question and you could be February's winner!

Threats that may affect you

• 1win data breach
• Wacom data breach
• Untrustworthy AI: How to deal with data poisoning
• Casio website infected with Skimmer

Cybersafety tip of the week

Going (for) broke: Six common online betting scams and how to avoid them

Common online gambling scams include phishing, fake apps, malicious casinos and fraudulent betting tips. Scammers often use social media, emails and deceptive ads to lure victims into giving personal or financial information. They are also using job scams, where victims are tricked into investing money for fake online jobs. To avoid these traps, use licensed platforms, enable multi-factor authentication and avoid suspicious offers or individuals. Staying cautious and informed is key to safer online betting.

Read the whole article.

Campus alerts!

We are seeing the following cyber attacks on campus:

• Tricky fake Google document share contains a fake Captcha

Stop and think before you click.

Announcements

• Win a spin of the prize wheel by participating in the Random Acts of Cybersecurity. There are multiple ways to enter. 

Threats that may affect you

• The latest on the PowerSchool data breach
• That Apple ID disabled message? It’s a dangerous scam
• The great Google Ads heist: criminals ransack advertiser accounts via fake Google ads
• If Google calls, it is a scam. They will never call you.

Cybersafety tip of the week

No, Siri’s “Learn from this App” setting is not sending your data to third parties

Recent social media claims that Apple's Siri is sending app data to third parties, especially regarding the "Learn from this App" feature are false. This feature, which has been around since iOS 9, helps Siri suggest apps based on usage patterns but does not share data with third parties. The data is encrypted and stored securely, either on the device or iCloud. Users can manage these settings themselves, choosing which apps are monitored. Other privacy concerns around Siri include voice activation, which can be turned off when it is not used.

Read the whole article.

Campus alerts!

We are seeing the following cyber attacks on campus:

• Fake employee handbook hits inboxes
• PayPal impersonator uses a hijacked Mailchimp account

Stop and think before you click.

Announcements

• January 28 is Data Privacy Day. Visit the Office of the Privacy Commisioner of Canada's website to learn more about protecting your privacy. 
• Watch this month's cybersecurity awareness video to learn how to calmly deal with malicious pop ups and win an entry into the monthly Random Acts of Cybersecurity draw. 

Threats that may affect you

• Facebook Marketplace scams
• Phishing trend exploiting YouTube URLs through O365 expiry themes
• Volkswagon, Audi data breach

Cybersafety tip of the week

Toronto man defrauded of $100 000 through a Google search. Here is how you can avoid his fate.

A Toronto man lost $100,000 worth of cryptocurrency after falling victim to a phishing scam. In 2021, he invested his family’s inheritance in cryptocurrency through Kraken, a popular exchange. However, when he tried to check his investment in 2023, he mistakenly clicked on a lookalike Kraken website found through a Google search. After he logged in, his funds were stolen within six minutes and transferred to an untraceable wallet.

Be cautious and ensure you visit the official website directly instead of using a Google search when looking for financial websites. Experts suggest using password managers to avoid phishing sites and enabling two-factor authentication (2FA) to increase account security.

Read the whole article.

Campus alerts!

We are seeing the following cyber attacks on campus:

• Board member impersonator tries to get you to pay a vendor
• Job scammer looks for a research assistant
• Faculty impersonator tries to trick payroll

Stop and think before you click.

Announcements

• Nominate a colleague for a Random Act of Cybersecurity and earn a chance to win a spin of the prize wheel.

Threats that may affect you

• Scholastic data breach
• PowerSchool data breach affects Alberta schools
• Emails from legitimate PayPal address used in crafty phishing scheme

Cybersafety tip of the week

How your personal information could put your savings at risk

Data brokers sell personal information, increasing the risk of scams that can jeopardize retirement security. Scammers use broad or targeted approaches, ranging from generic phishing to highly detailed attacks. To protect yourself, invest in data removal services, avoid clicking on suspicious links, never share sensitive information under pressure and always verify identities before providing personal details. These precautions can help reduce the risks posed by data brokers and safeguard your retirement savings.

Read the whole article.

Campus alerts!

We are seeing the following cyber attacks on campus:

• Tom Rahilly impersonator tries to get your phone number
• PDF shared through Adobe contains a malicious link
• McAfee impersonator fakes a PayPal invoice
• Another McAfee impersonator looks for money

Stop and think before you click.

Announcements

• Congratulations to Leigh-Ann Duke who has won the Random Acts of Cybersecurity draw for December. Leigh-Ann was entered for watching the monthly cybersecurity awareness video on phishing.
• Perform a Random Act of Cybersecurity and earn a chance to win a spin of the prize wheel.

Threats that may affect you

• Young Living data breach
• Glamira
• Phishers cast wide net with spoofed Google Calendar invites
• Fake Captcha driving Infostealer infections
• Dozens of Chrome extensions hacked, exposing millions of users to data theft

Cybersafety tip of the week

Understanding brushing scams and how to protect yourself

A "brushing" scam occurs when you receive unsolicited packages from online retailers, often filled with inexpensive items like humidifiers, flashlights or random products. Scammers use this tactic to inflate their ratings and improve their sales by creating fake reviews under your name using your personal details, which they may have obtained from data breaches. While receiving these packages may seem like a surprise gift, it raises serious privacy and security concerns.

To protect yourself:

1. Contact the retailer if the package is from Amazon or another company.
2. Return unopened items by marking them “Return to Sender.”
3. Never pay for unordered merchandise.
4. Monitor your accounts for unauthorized orders.
5. Consider using services like Incogni to remove personal information from online data brokers.
6. Change your passwords if your personal information has been compromised.
7. Be cautious with QR codes and use antivirus software to protect your devices from malware.

Read the whole article.

Random Acts of Cybersecurity monthly question

Why should you be concerned if several items you didn't order get delivered to your door with your name on them?

Submit your answer.