Campus alerts!

We are seeing the following cyber attacks on campus:

• Attacker tries to entice with "photos"
• Docusign impersonator tries using a QR code to get your data
• Attacker uses email marketing tool to create a fake document share
• Clever attacker sends fake invoice using email marketing tool
• Attacker attempts to impersonate Rom Abella
• Tim Rahilly impersonator tries to get an invoice paid

Stop and think before you click.

Announcements

• Phishing training will restart at the end of April. The first email sent will explain how the new program works. Read and report the email to earn a reward and reduce your risk score.

Threats that may affect you

• Hertz data breach
• That weird CAPTCHA could be a malware trap - here's how to protect yourself

Cybersafety tip of the week

5 warning signs that your phone's been hacked - and how to fight back

Smartphones hold sensitive data, making them hacker targets via malicious apps, phishing and spyware. Signs of a hack include:

• Rapid battery drain
• Slow performance
• Unfamiliar logins
• Reduced storage
• Unknown apps

To combat this, users can utilize USSD codes to check for call redirection or perform a factory reset on their device. Regularly reviewing installed apps is also crucial.

Read the whole article

Campus alerts!

We are seeing the following cyber attacks on campus:

• Fake GeekSquad subscription renewal
• Fake fax confirming a fund transfer
• Tim Rahilly impersonator tries to get an invoice paid
• Docusign impersonator looks for a document signature
• Royal Bank impersonator seeks account verification
• Attackers try to get you to click with a "too large" email

Stop and think before you click.

Threats that may affect you

• Don't open that JPEG in WhatsApp for Windows. It might be an .EXE
• X data breach
• I clicked on four sneaky online scams on purpose - to show you how they work
• Boulanger data breach

Cybersafety tip of the week

Seven password rules security experts live by in 2025

To boost cybersecurity in 2025, experts recommend seven key password rules:

• Use long, random passwords (15+ characters)
• Rely on a password manager
• Never reuse passwords
• Avoid password hints
• Change default passwords on devices
• Enable multi-factor authentication (especially for sensitive accounts)
• Only change passwords when necessary. 

Tools like password managers and secure government resources like NIST and CISA can help individuals and small businesses better defend against cyber threats with practical, updated guidelines.

Read the whole article.

Campus alerts!

We are seeing the following cyber attacks on campus:

• Zoom impersonator invites you to a "meeting"
• Facebook impersonator threatens to shut down your account

Stop and think before you click.

Announcements

• April marks the beginning of our password manager campaign. Learn how using a password manager can save you time and effort.

Threats that may affect you

• How to delete your 23andMe data and why you should do it now
• Sniper: Phantom’s Resolution demo contains malware
• FBI warns about document conversion sites spreading malware
• Fake CAPTCHA websites hijack your clipboard to install information
• Hacker Leaks Samsung Customer Data

Cybersafety tip of the week

How to escape Facebook’s creepy ad tracking

Facebook collects user data for targeted advertising, even though it doesn't have direct access to Google searches. According to Facebook, it doesn't listen to conversations but gathers data through tracking cookies, Facebook Pixel (a website tracking tool), Meta-owned apps (like WhatsApp and Instagram), user interactions (likes, comments, messages), partner data from third parties and device/location tracking. To limit Facebook's ad tracking, adjust “Off-Facebook Activity” settings, manage ad preferences, block ads using tools like TotalAd Blocker and use a VPN to enhance privacy.

Read the whole article.

Campus alerts!

We are seeing the following cyber attacks on campus:

• Fake BMO purchase order 
• Document share impersonates MRU employees

Stop and think before you click.

Announcements

• Find out how prepared you are for a cyber attack. Login to the new cybersecurity awareness training platform and check your risk score. 

Threats that may affect you

• Scareware combined with phishing in attacks targeting macOS users
• Apple Passwords app vulnerability exposed users for months
• Arcane stealer instead of Minecraft cheats
• Free file converter malware scam "rampant" claims FBI

Cybersafety tip of the week

Don't wait until it's too late: The importance of backing up your data

March 31 is World Backup Day, reminding us to protect our data. Losing research, coursework, or administrative files can be devastating, so it's essential to back up regularly. University files should not be stored on the C: drive or desktop, as these locations aren’t backed up. At home, follow the 3-2-1 backup rule and enable automatic backups to safeguard your files. A few simple steps today can prevent major data loss tomorrow.

Read the whole article.

Campus alerts!

We are seeing the following cyber attacks on campus:

• Lazy scammer uses a Docusign image as a lure

Stop and think before you click.

Announcements

• The new CIRA Security Awareness Training platform has launched. Login, check your risk score and browse through the course gallery.

Threats that may affect you

• Fake Text Message from the Government of Canada
• Microsoft 365 Targeted in New Phishing, Account Takeover Attacks
• Is your phone eavesdropping on you? Try NordVPN's simple test to find out
  

Cybersafety tip of the week

How to tell if your browser has been hijacked

Browser hijacking occurs when malicious software alters browser settings, redirecting searches and changing homepages. These hijackers often infiltrate through deceptive extensions. Signs of infection include unauthorized changes, intrusive ads and redirects. To remove them, uninstall suspicious extensions, use antivirus scans and reset browser settings. Prevent future attacks by downloading extensions from official sources, keeping software updated, avoiding suspicious links and using strong antivirus protection. Changing passwords post-infection is also crucial for security.

Read the whole article.

Campus alerts!

We are seeing the following cyber attacks on campus:

• Fake Interac transfer asks for money transfer approval
• Attacker impersonates Zix and Wells Fargo
• Another board member impersonator tries to "give away" a travel trailer
• Attacker uses Adobe Sign to sneak a fake invoice past our defenses
• Another Docusign impersonator hits inboxes

Stop and think before you click.

Announcements

• The new training platform launches Thursday, March 13 and Friday, March 14. Wednesday, March 12, is the last day to complete your training on the old platform.

Threats that may affect you

• How Google tracks Android device users before they've even opened an app
• Two decades of visitor data at the Toronto Zoo stolen in cyberattack
• 16 hijacked Chrome extensions expose 3.2 million users
• Google Rolls Out AI Scam Detection for Android to Combat Conversational Fraud

Cybersafety tip of the week

Kids behaving badly online? Here's what parents can do

The digital age has widened the generational gap between parents and children, making online safety education crucial. Kids’ impulsivity can lead to oversharing, cyberbullying, sexting, hacking and interactions with predators. Parents should set clear rules, lead by example, use parental controls and discuss online risks openly. Additional steps include monitoring privacy settings, enrolling in identity protection and guiding children toward ethical tech use. Open communication is key to fostering responsible digital habits.

Read the whole article.

Campus alerts!

We are seeing the following cyber attacks on campus:

• Board member impersonator "giving away" a travel trailer
• Ruth Seltner impersonator sending "photos"
• Fake PayPal invoices spoofing PayPal's email address
• Poorly constructed fake SharePoint document share
• Fake staff assessment makes a return

Stop and think before you click.

Announcements

• A brand-new cybersecurity awareness  training experience launches March 13 and 14. 
• The deadline for completing training on the old platfrom has been extended to March 12.
• Congratulations to March's Random Acts of Cybersecurity winner, Rissa Myers. Rissa was entered into the draw for watching the monthly cybersecurity video. A big thank you to all who participated, the contest has now ended.

Threats that may affect you

• Beware: PayPal "New Address" feature abused to send phishing emails
• Got a Microsoft Teams/WhatsApp/Signal invite? It may be malicious.
• Canada Revenue Agency (CRA) Data Breaches: A Growing Concern for Canadians

Cybersafety tip of the week

Hackers stole this engineer's 1Password database. Could it happen to you?

In February 2024, engineer Matthew Van Andel unknowingly downloaded malware that gave hackers full access to his computer. The attackers stole sensitive data, including passwords and session cookies and leaked internal Disney communications. Van Andel lost his job after an investigation. The breach occurred because of untrusted software, not flaws in his password manager, 1Password. The incident highlights the importance of avoiding untrusted software and securing password managers with strong 2FA and separate authentication methods.

Read the whole article.

Campus alerts!

We are seeing the following cyber attacks on campus:

• No, you aren't being given 1.5 million US dollars in a fraud settlement

Stop and think before you click.

Announcements

• This is your last chance to watch the Mobile Devices monthly video. Watch now and be entered into the Random Acts of Cybersecurity draw.
• A new training platform is coming. You have until March 9 to complete your training in the old platform.
• The is your last week earn an entry into February's Random Acts of Cybersecurity draw by nominating a colleague for being cyber safe. 

Threats that may affect you

• Stalkerware apps Cocospy and Spyic are exposing phone data of millions of people
• Huge Christmas data breach - 14 million shipping records leaked, putting shoppers at risk
• No, you’re not fired – but beware of job termination scams
• Gmail users urged not to ignore FBI warnings as sophisticated AI-driven scams target users 
• Steam Malware Alert: PirateFi Game Spreads Vidar Infostealer

Cybersafety tip of the week

This is what you are doing wrong when scammers call

Cold calls can be a scam risk, as hackers may use personal information to access accounts or commit fraud. To protect yourself, avoid sharing details with unsolicited callers and hang up immediately if anything seems suspicious. Tips include verifying calls, not answering unknown numbers, using spam-blocking apps and setting a voicemail password. Register for the Do Not Call Registry and consider using data removal services to protect your personal information online.

Read the whole article.

Campus alerts!

We are seeing the following cyber attacks on campus:

• Another job scam hits inboxes
• Sneaky fake staff assessment spoofs an MRU email address
• Attacker sends an email too large to be displayed

Stop and think before you click.

Announcements

• A new cybersecurity awareness training platform is coming. If you want to complete your training on the current platform, you can do so until the end of day on Sunday, March 9.

Threats that may affect you

• Zacks Investment Research data breach
• StorEnvy data breach
• How AI-driven identify fraud is causing havoc

Cybersafety tip of the week

Ten tips on using public computers safely

To use public computers securely, always log out of accounts, disable autocomplete and password saving, and avoid leaving sensitive data visible. After use, erase your browsing history and any temporary files, and then reboot the computer. Be cautious of people watching you and avoid entering sensitive information. In addition, consider using a temporary email or portable software on a USB drive for added security. If necessary, change passwords after using a public computer to further protect your accounts.

Read the whole article.

Campus alerts!

We are seeing the following cyber attacks on campus:

• Document review appears to come from HR
• Yet another attacker tries to impersonate Docusign
• Fake Disney+ subscription renewal debuts
• Another Docusign impersonator hits inboxes
• Attacker uses email marketing tool to send fake invoice
• Incompetent scammer fails at impersonating Tim Rahilly
• Scammer make a sad attempt to impersonate Amazon
• Attacker forgets to use spellcheck in Sharepoint phish

Stop and think before you click.

Announcements

• A new cybersecurity awareness video is coming to your inbox on Friday. Watch the video and be entered into the Random Acts of Cybersecurity draw. 

Threats that may affect you

• Energy-saving scam uses Elon Musk’s name
• Hundreds of fake Reddit sites push Lumma Stealer malware 
• The world’s most invasive apps are collecting information they don't need
• Avery data breach included credit card information
• LandAirSea data breach

Cybersafety tip of the week

Why rebooting your phone daily is your best defense against zero-click hackers

Spyware tools have increasingly targeted journalists, activists and politicians, raising concerns about mobile security. WhatsApp recently uncovered a hacking campaign affecting 90 users, linked to Israeli spyware company Paragon Solutions. Their spyware, Graphite, uses zero-click attacks to infiltrate devices via malicious PDFs. Experts warn that mobile spyware is becoming widespread and profitable. Users should reboot devices regularly and use security tools to mitigate risks. 

Read the whole article.

Campus alerts!

We are seeing the following cyber attacks on campus:

• Job scammer forgets the email subject
• Wells Fargo impersonator uses a document share as bait
• Marketing email masquerading as Docusign
• Scammer hijacks a Quickbooks account to send a fake invoice
• Fake McAfee subscription renewal arrives in inboxes, again
• Scammer impersonates a communications company

Stop and think before you click.

Announcements

• Register for the Protecting Yourself Against Cybercrime workshop on Thursday, Feb. 6.
• Congratulations to Rob Platt, the January winner of the Random Acts of Cybersecurity draw. Rob won for answering the Random Acts of Cybersecurity monthly question. Answer this month's question and you could be February's winner!

Threats that may affect you

• 1win data breach
• Wacom data breach
• Untrustworthy AI: How to deal with data poisoning
• Casio website infected with Skimmer

Cybersafety tip of the week

Going (for) broke: Six common online betting scams and how to avoid them

Common online gambling scams include phishing, fake apps, malicious casinos and fraudulent betting tips. Scammers often use social media, emails and deceptive ads to lure victims into giving personal or financial information. They are also using job scams, where victims are tricked into investing money for fake online jobs. To avoid these traps, use licensed platforms, enable multi-factor authentication and avoid suspicious offers or individuals. Staying cautious and informed is key to safer online betting.

Read the whole article.

Campus alerts!

We are seeing the following cyber attacks on campus:

• Tricky fake Google document share contains a fake Captcha

Stop and think before you click.

Announcements

• Win a spin of the prize wheel by participating in the Random Acts of Cybersecurity. There are multiple ways to enter. 

Threats that may affect you

• The latest on the PowerSchool data breach
• That Apple ID disabled message? It’s a dangerous scam
• The great Google Ads heist: criminals ransack advertiser accounts via fake Google ads
• If Google calls, it is a scam. They will never call you.

Cybersafety tip of the week

No, Siri’s “Learn from this App” setting is not sending your data to third parties

Recent social media claims that Apple's Siri is sending app data to third parties, especially regarding the "Learn from this App" feature are false. This feature, which has been around since iOS 9, helps Siri suggest apps based on usage patterns but does not share data with third parties. The data is encrypted and stored securely, either on the device or iCloud. Users can manage these settings themselves, choosing which apps are monitored. Other privacy concerns around Siri include voice activation, which can be turned off when it is not used.

Read the whole article.

Campus alerts!

We are seeing the following cyber attacks on campus:

• Fake employee handbook hits inboxes
• PayPal impersonator uses a hijacked Mailchimp account

Stop and think before you click.

Announcements

• January 28 is Data Privacy Day. Visit the Office of the Privacy Commisioner of Canada's website to learn more about protecting your privacy. 
• Watch this month's cybersecurity awareness video to learn how to calmly deal with malicious pop ups and win an entry into the monthly Random Acts of Cybersecurity draw. 

Threats that may affect you

• Facebook Marketplace scams
• Phishing trend exploiting YouTube URLs through O365 expiry themes
• Volkswagon, Audi data breach

Cybersafety tip of the week

Toronto man defrauded of $100 000 through a Google search. Here is how you can avoid his fate.

A Toronto man lost $100,000 worth of cryptocurrency after falling victim to a phishing scam. In 2021, he invested his family’s inheritance in cryptocurrency through Kraken, a popular exchange. However, when he tried to check his investment in 2023, he mistakenly clicked on a lookalike Kraken website found through a Google search. After he logged in, his funds were stolen within six minutes and transferred to an untraceable wallet.

Be cautious and ensure you visit the official website directly instead of using a Google search when looking for financial websites. Experts suggest using password managers to avoid phishing sites and enabling two-factor authentication (2FA) to increase account security.

Read the whole article.

Campus alerts!

We are seeing the following cyber attacks on campus:

• Board member impersonator tries to get you to pay a vendor
• Job scammer looks for a research assistant
• Faculty impersonator tries to trick payroll

Stop and think before you click.

Announcements

• Nominate a colleague for a Random Act of Cybersecurity and earn a chance to win a spin of the prize wheel.

Threats that may affect you

• Scholastic data breach
• PowerSchool data breach affects Alberta schools
• Emails from legitimate PayPal address used in crafty phishing scheme

Cybersafety tip of the week

How your personal information could put your savings at risk

Data brokers sell personal information, increasing the risk of scams that can jeopardize retirement security. Scammers use broad or targeted approaches, ranging from generic phishing to highly detailed attacks. To protect yourself, invest in data removal services, avoid clicking on suspicious links, never share sensitive information under pressure and always verify identities before providing personal details. These precautions can help reduce the risks posed by data brokers and safeguard your retirement savings.

Read the whole article.

Campus alerts!

We are seeing the following cyber attacks on campus:

• Tom Rahilly impersonator tries to get your phone number
• PDF shared through Adobe contains a malicious link
• McAfee impersonator fakes a PayPal invoice
• Another McAfee impersonator looks for money

Stop and think before you click.

Announcements

• Congratulations to Leigh-Ann Duke who has won the Random Acts of Cybersecurity draw for December. Leigh-Ann was entered for watching the monthly cybersecurity awareness video on phishing.
• Perform a Random Act of Cybersecurity and earn a chance to win a spin of the prize wheel.

Threats that may affect you

• Young Living data breach
• Glamira
• Phishers cast wide net with spoofed Google Calendar invites
• Fake Captcha driving Infostealer infections
• Dozens of Chrome extensions hacked, exposing millions of users to data theft

Cybersafety tip of the week

Understanding brushing scams and how to protect yourself

A "brushing" scam occurs when you receive unsolicited packages from online retailers, often filled with inexpensive items like humidifiers, flashlights or random products. Scammers use this tactic to inflate their ratings and improve their sales by creating fake reviews under your name using your personal details, which they may have obtained from data breaches. While receiving these packages may seem like a surprise gift, it raises serious privacy and security concerns.

To protect yourself:

1. Contact the retailer if the package is from Amazon or another company.
2. Return unopened items by marking them “Return to Sender.”
3. Never pay for unordered merchandise.
4. Monitor your accounts for unauthorized orders.
5. Consider using services like Incogni to remove personal information from online data brokers.
6. Change your passwords if your personal information has been compromised.
7. Be cautious with QR codes and use antivirus software to protect your devices from malware.

Read the whole article.

Random Acts of Cybersecurity monthly question

Why should you be concerned if several items you didn't order get delivered to your door with your name on them?

Submit your answer.