This is the last newsletter for the year. The cybersecurity team wishes you all a Happy Holidays and we will see you in 2021!
Is the etransfer notice from MRU malicious or legit?
Learn how to use the KeePass password manager by taking a workshop
CYBERSECURITY CHALLENGE
Search for contest entry codes in the newsletter. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco. Don't forget to complete the annual cybersecurity survey and get two additional contest entries.
Congratulations to the Administration, Finance & Marketing team for passing the Math & Sciences team and moving into second place!
PHISHING SCAMS
Give your emails 100% of your attention. Watch out for emails about:
COVID vaccine
Stop and think before you click.
Contest entry code: pz2j7g
OTHER NEWS
Apple now shows you all the ways iOS apps track you
Canada assessing SolarWinds hack as U.S. agencies lock down
Coil payments platform accidentally sends customer emails to fellow users
Three million users installed 28 malicious Chrome or Edge extensions
Search for contest entry codes in the newsletter. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco.
Congratulations to the Enrollment Services team for moving up two places into fifth place!! Don't forget to complete the survey and receive two contest entry codes.
SECURITY BREACHES
Change your password if you use one of these websites or applications. Watch for signs of identity theft.
Pluto TV
Peatix
Keep your accounts safe, use a unique password for each one.
OTHER NEWS
Ransomware gangs are now cold-calling victims if they restore from backups without paying
Vishing criminals let rip with two scams at once
Mobile payment apps: How to stay safe when paying with your phone
Pure frustration: What happens when someone uses your email address to sign up for PayPal, car hire, doctors, security systems and more
Some tips to keep you safe during Black Friday and Cyber Monday.
MUST READ
A draft copy of the newsletter was sent to subscribers in error. Please disregard the email with the subject Cybersecurity Newsletter Draft.
Beware text messages promising returns from your mobile provider
CYBERSECURITY CHALLENGE
Search for contest entry codes in the newsletter. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco.
This week the Math & Sciences team moved up into second place. They are on the heals of Facilities with Administration, Finance & Marketing taking the third place slot. Way to go teams, it is a three way race!
Contest entry code: fjg7b9
COMPROMISED & FAKE APPS
If you have one of these apps, you may have a virus on your device.
Minecraft mod apps
Avoid fake apps, only download ones with good reviews from reputable sites.
SECURITY BREACHES
Change your password if you use one of these websites or applications. Watch for signs of identity theft.
Spotify
Keep your accounts safe, use a unique password for each one.
OTHER NEWS
Microsoft warns against SMS, voice calls for multi-factor authentication: Try something that can't be SIM swapped
How to Spot Retail Scams (2020)
Google’s free services are now phishing campaign’s best friends
His bank raided his account to cover a payment made to scammers
Watch out for these emails, they may arrive in your inbox.
CYBERSECURITY CHALLENGE
Search for contest entry codes in the newsletter. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco.
Come join us for the Cybercafe on November 26 at 3:00 pm and earn a new contest entry code. No need to register, just join the Google Meet. We will be discussing the latest cybersecurity news. Bring your questions.
PHISHING/VISHING SCAMS
Give your emails 100% of your attention. Watch out for:
• Text messages about missed payments
Stop and think before you click.
Contest entry code: cad24j
SECURITY BREACHES
Change your password if you use one of these websites or applications. Watch for signs of identity theft.
• Mashable • Animal Jam • 123RF • Home Chef • Facebook
Keep your accounts safe, use a unique password for each one.
OTHER NEWS
• Be Very Sparing in Allowing Site Notifications • Ransomware Group Turns to Facebook Ads • Why you should keep your Netflix password to yourself • Black Friday – stay safe before, during and after peak retail season
• There will be no newsletter next week. • An easy way to see if your Google Drive files are findable by others • Issues with the PhishAlarm button? Clear your cache
CYBERSECURITY CHALLENGE
Search for contest entry codes in the newsletter. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco.
The Facilities Management and Administration, Finance and Marketing teams have pulled ahead of the Math & Sciences team. Great participation everyone! Keep it up, the race is wide open.
PHISHING SCAMS
Give your emails 100% of your attention. Watch out for emails about:
• Google Drive share notifications
Stop and think before you click.
SECURITY BREACHES
Change your password if you use one of these websites or applications. Watch for signs of identity theft.
• StarTribune • GrowDiaries
Keep your accounts safe, use a unique password for each one.
OTHER NEWS
• Cyberattack shuts down Saskatchewan Polytechnic • Hackers targeting educators • SMS Phishing + Cardless ATM = Profit • Child abductors may use social media to lure victims, FBI warns
Check out the phishing emails that could show up in your inbox this week.
MUST READ
• Check the sharing permissions on your files stored on the Google Drive
CYBERSECURITY CHALLENGE 2020/2021
Participate in cybersecurity activities and earn contest entry codes. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco.
CYBERSECURITY AWARENESS MONTH 2020
We are celebrating with a whole month of special activities:
Virtual Treasure Hunt - You can join anytime before October 30, 2020 and earn codes with each clue. Those who find the treasure are entered into a draw for a $100 Amazon gift certificate.
Cybercafe - Come with your questions for our cybersecurity experts. Have no questions? Join us for a discussion on the latest threats. Participants earn contest entry codes.
Contest entry code: bgmxkc
PHISHING SCAMS
Give your emails 100% of your attention. Watch out for emails that:
• Are replies to old messages • Ask if you are available/have a moment
Stop and think before you click.
SECURITY BREACHES
Change your password if you use one of these websites or applications. Watch for signs of identity theft.
• Albion online gamers forum
Keep your accounts safe, use a unique password for each one.
OTHER NEWS
• 50,000 home cameras reportedly hacked, footage posted online • Beware COVID-19 Charity Fraudsters, Warns the FBI • How to e-Transfer safely and avoid scams • FBI, CISA warn of spike in vishing attacks
A nice reminder to be careful when replying to emails.
CYBERSECURITY CHALLENGE 2020/2021
Participate in cybersecurity activities and earn contest entry codes. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco.
CYBERSECURITY AWARENESS MONTH 2020
We are celebrating with a whole month of special activities:
The Cybersecurity Monster Manual: Stopping things that go "hack" in the night - Michael McDonnell
Virtual Treasure Hunt - You can join anytime before October 30, 2020 and earn codes with each clue. Those who find the treasure are entered into a draw for a $100 Amazon gift certificate.
PHISHING SCAMS
Give your emails 100% of your attention. Watch out for emails about:
• President Donald Trump’s coronavirus diagnosis
Stop and think before you click.
SECURITY BREACHES
Change your password if you use one of these websites or applications. Watch for signs of identity theft.
• Docsketch • Moda Operandi
Keep your accounts safe, use a unique password for each one.
Contest entry code: iiwvecm
OTHER NEWS
• 5 steps to secure your connected devices • So you thought your personal data was deleted? • Creepy covert camera “feature” found in popular smartwatch for kids • Had your face stolen lately?
School and work files should be stored on Google Drive or an MRU network drive where they are automatically backed up. But how do you secure your personal data?
MUST READ
• Alignable invites circulating through campus inboxes
CYBERSECURITY CHALLENGE 2020/2021
Participate in cybersecurity activities and earn contest entry codes. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco.
CYBERSECURITY AWARENESS MONTH 2020
We are celebrating with a whole month of special activities:
The Cybersecurity Monster Manual: Stopping things that go "hack" in the night - Michael McDonnell
Virtual Treasure Hunt - You can join anytime before October 30, 2020 and earn codes with each clue. Those who find the treasure are entered into a draw for a $100 Amazon gift certificate.
Cybersecurity: Are our graduates ready for the new economy? - Angel McAllister
Double contest entry codes when you complete your Cybersecurity Awareness Training in the month of October.
Contest entry code: t4is9j
PHISHING SCAMS
Give your emails 100% of your attention. Watch out for emails about:
• Black Lives Matter • Donald Trump's COVID illness
Stop and think before you click.
SECURITY BREACHES
Change your password if you use one of these websites or applications. Watch for signs of identity theft.
• WiziShop
Keep your accounts safe, use a unique password for each one.
OTHER NEWS
• This FBI Wi-Fi warning could spoil your working from home escape plan • QR Codes Serve Up a Menu of Security Concerns • Gmail users: Expect to see these new security alerts, says Google • 8 tips to tighten up your work-from-home network
Let's start Cybersecurity Awareness Month with some reminders about passwords.
MUST READ
• It's Cybersecurity Awareness Month! • What email address to use when
CYBERSECURITY CHALLENGE 2020/2021
CSAM marks the beginning of the cybersecurity year. With a new year, there is a new, updated Challenge. Participate in activities, and earn contest entry codes. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco.
CYBERSECURITY AWARENESS MONTH 2020
This month we have several special activities to mark CSAM!
Virtual Treasure Hunt - Solve the clues and collect contest entry codes. Everyone who finds the treasure is entered into an addtitional draw for a $100 Amazon gift certificate courtesy of WBM Technologies.
Cybercrime Series - hear tales of cyberhorror and earn contest entry codes
Earn twice the codes - complete your cybersecurity awareness training in the month of October and earn two codes instead of one.
OTHER NEWS
• What to do when you (and your kids) are online at home • Serious Security: Phishing without links – when phishers bring along their own web pages • Who watches the watchers? Samsung does so it can fling ads at owners of its smart TVs • A Complete Stranger Controlled This Woman’s Home Security System, but They’re Not the One She’s Angry With
The Lego people are back! This time they tell you all about firewalls.
CYBERSECURITY CHALLENGE
Search for contest entry codes in the newsletter. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco.
CYBERSECURITY AWARENESS MONTH 2020
The Cybercrime Series is coming!
Angela McAllister with the Canadian Centre for Cybersecurity, October 6, 2020 from 12:00 pm to 1:00 pm REGISTER
Michael McDonnell, the Cybersecurity Librarian, October 21, 2020 from 2:00 pm to 3:00 pm REGISTER
Registration for the Virtual Treasure Hunt is open!
Solve the clues and find the treasure.
You could win a $100 gift certificate from Amazon courtesy of WBM technologies Inc.
Contest entry code: 3nax88
PHISHING SCAMS
Give your emails 100% of your attention. Watch out for emails about:
• Knowbe4 security awareness training notification
Stop and think before you click.
SECURITY BREACHES
Change your password if you use one of these websites or applications. Watch for signs of identity theft.
• Shopify
Keep your accounts safe, use a unique password for each one.
OTHER NEWS
• 5 ways cybercriminals can try to extort you • SMS phishing scam pretends to be Apple “chatbot” – don’t fall for it! • How to protect your Facebook account: a walkthrough • Wikipedia Articles as part of Tech Support Scamming Campaigns?
Learn all about cookies, whether they are dangerous and how they work.
MUST READ
• Don't take candy from strangers • Workshop and Cybercafe held next week
CYBERSECURITY CHALLENGE
Search for contest entry codes in the newsletter. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco.
Contest entry code: 44tei7
PHISHING SCAMS
Give your emails 100% of your attention. Watch out for emails about:
• Twitter social engineering attack
Stop and think before you click.
SECURITY BREACHES
Change your password if you use one of these websites or applications. Watch for signs of identity theft.
• Razer
Keep your accounts safe, use a unique password for each one.
OTHER NEWS
• Travel Industry Giants Failed to Secure their Websites Despite High-Profile Data Breaches • My stolen credit card details were used 4,500 miles away. I tried to find out how it happened • Smartphone PIN protection methods have high failure rate • Why people fall for online scams
Learn about the war that could be going on in your router.
MUST READ
• Using Jabber on your computer? You need to update, NOW!
CYBERSECURITY CHALLENGE 2019/2020
Search for contest entry codes in the newsletter. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco. The draw is on September 30, 2020!
Unfortunately, not everyone who completed their cybersecurity awareness training received a contest entry code this year. If you completed training but did not get a code, please email me bpasteris@mtroyal.ca. Get your codes in and win!
CYBERSECURITY AWARENESS MONTH
The count down to CSAM has begun!
• Cybersecurity Awareness Month begins in 20 days
Be a superhero, participate in CSAM and win prizes!
OTHER NEWS
• Fake web alerts – how to spot and stop them • What are digital certificates and how do they work? • Newcastle University says it will take “several weeks” to recover from cyber attack • Phishing tricks – the Top Ten Treacheries of 2020
• Fake voicemail notifications hitting campus inboxes • Scammer attempts to gain employee pension information
CYBERSECURITY CHALLENGE
Search for contest entry codes in the newsletter. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco.
PHISHING SCAMS
Give your emails 100% of your attention. Watch out for emails about:
• Sharepoint and OneNote file sharing • Slack file share Stop and think before you click.
OTHER NEWS
• Fake Android notifications • Vishing scams use Amazon and Prime as lures – don’t get caught! • Mozilla research: Browsing histories are unique enough to reliably identify users • Royal Bank among the top victims of cybersquatting, says report
Find out why so many companies are experiencing data breaches.
MUST READ
• File management when working from home • Job scam hits MRU
CYBERSECURITY CHALLENGE
Search for contest entry codes in the newsletter. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco. Contest entry code: gy58n6
PHISHING SCAMS
Give your emails 100% of your attention. Watch out for emails about:
• Email not being delivered
Stop and think before you click.
OTHER NEWS
• Voice Phishers Targeting Corporate VPNs • TV stations – stop broadcasting your passwords! • Thousands of government service and CRA accounts hit by credential stuffing attack • 80% of Drivers Don’t Remove Personal Information Before Selling Their Car
Learn all about VPNs. Remember only use the Mount Royal VPN to connect to our network.
MUST READ
• New tool for remote file access coming • New Cybersecurity Awareness Training Platform is Launched • Fake request for aid from international student arriving in inboxes on campus
CYBERSECURITY CHALLENGE
Search for contest entry codes in the newsletter. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco.
SECURITY BREACHES
Change your password if you use one of these websites or applications. Watch for signs of identity theft.
• ProctorU • TrueFire • Havenly
Keep your accounts safe, use a unique password for each one.
OTHER NEWS
• Whoops, our bad, we may have 'accidentally' let Google Home devices record your every word, sound • How much is your personal data worth on the dark web? • 295 Chrome extensions caught hijacking Google and Bing search results • If you own one of these 45 Netgear devices, replace it
Keep your accounts safe, use a unique password for each one.
Contest entry code: qjetmu
OTHER NEWS
• Instagram: How To Avoid The '3 Of Your Pictures' DM Scam • Hackers Can Now Trick USB Chargers To Destroy Your Devices • Garmin services and production go down after ransomware attack • Fraud: Banks reveal the 10 coronavirus scams to be wary of
Find out how likely it is that ransomware will bring down the power grid.
MUST READ
•Power outage on campus this weekend will affect remote desktop users at home
CYBERSECURITY CHALLENGE
Search for contest entry codes in the newsletter. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco.
PHISHING SCAMS
Give your emails 100% of your attention. Watch out for emails about:
• Zoom account notification • SurveyMonkey
Stop and think before you click.
SECURITY BREACHES
Change your password if you use one of these websites or applications. Watch for signs of identity theft.
• BMW • Yahoo • LiveAuctioneers • Twitter
Keep your accounts safe, use a unique password for each one.
OTHER NEWS
• Shopped recently in a small online store? Check this list to see if it was one of 570 websites infected with card-skimming Magecart • Has your iPhone, iPad, or iPod touch been hacked? Here's how to find out • Popular home routers plagued by critical security flaws • Facebook hoaxes back in the spotlight – what to tell your friends
• Fake DHL notification arriving in inboxes on campus • Amazon "survey" offering free gift and malware • Our alert system emails do not come from telr.com
CYBERSECURITY CHALLENGE
Search for contest entry codes in the newsletter. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco.
We have had some movement on the leaderboard. Congratulations to the Campus Health team for overtaking the Faculty of Business and Communications team. Congratulations to the Organizations team as well for overtaking the Faculty of Arts team. Way to go!
PHISHING SCAMS
Give your emails 100% of your attention. Watch out for emails about:
• Event invites
Stop and think before you click.
COMPROMISED & FAKE APPS
If you have one of these apps, you may have a virus on your device.
• Canadian government COVID-19 tracing app
Avoid fake apps, only download ones with good reviews from reputable sites.
SECURITY BREACHES
Change your password if you use one of these websites or applications. Watch for signs of identity theft.
• Stalker Online video game hacked
Keep your accounts safe, use a unique password for each one.
Contest entry code:idai37
OTHER NEWS
• TikTok: Beneath Its Fun Exterior Lies A Sinister Purpose • Anatomy of a survey scam – how innocent questions can rip you off • iOS 14 flags TikTok, 53 other apps spying on iPhone clipboards • Google removes 25 Android apps caught stealing Facebook credentials • Canadian privacy commissioners to investigate Tim Hortons data collection practices
WANT TO LEARN MORE?
Looking for more cybersecurity tips, tricks and news? Visit the MRU Cybersecurity Hub at mru.ca/cybersecurity you can also find old newsletters in the archives. Have comments, suggestions or ideas on how to make the newsletter better? Email me at bpasteris@mtroyal.ca.
Did a friend forward you this newsletter? Subscribe and you can receive your own copy delivered to your inbox every Friday.
• Newsletter issued every second week during the summer • Protecting yourself against cybercrime workshop - June 24
CYBERSECURITY CHALLENGE
Search for contest entry codes in the newsletter. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco.
PHISHING SCAMS
Give your emails 100% of your attention. Watch out for emails about:
• Supporting Black Lives Matter
Stop and think before you click.
SECURITY BREACHES
Change your password if you use one of these websites or applications. Watch for signs of identity theft.
• Claires.com
Keep your accounts safe, use a unique password for each one.
OTHER NEWS
•Bitcoin scammers take YouTube channels for a SpaceX ride • You’ve heard of sextortion – now there’s “breachstortion”, too • FBI warns about fraudsters targeting banking app users • New Mac malware spreads disguised as Flash Player installer via Google search results
Contest entry code: 2g8gj8
WANT TO LEARN MORE?
Looking for more cybersecurity tips, tricks and news? Visit the MRU Cybersecurity Hub at mru.ca/cybersecurity you can also find old newsletters in the archives. Have comments, suggestions or ideas on how to make the newsletter better? Email me at bpasteris@mtroyal.ca.
Did a friend forward you this newsletter? Subscribe and you can receive your own copy delivered to your inbox every Friday.
Get the answer to the burning question, how long should your password be?
MUST READ
• Sneaky fake evaluation form found in MRU inboxes
CYBERSECURITY CHALLENGE
Search for contest entry codes in the newsletter. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco.
OTHER NEWS
• Google Takes Action Against Misleading and Malicious Notifications in Chrome • Contact-tracer spoofing is already happening – and it's dangerously simple to do • Ransomware locks down the Nipissing First Nation • How secure is your phone’s lock screen?
Find out how vulnerable you are to attacks...hack yourself.
MUST READ
• Show off your cybersecurity prowess with digital stickers • New reporting process for malicious emails
CYBERSECURITY CHALLENGE
Search for contest entry codes in the newsletter. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco.
With everyone working from home we have had to discontinue our sticker program. However, I know how much everyone likes collecting their codes, so we have replaced it with the digital stickers. Get yours now and start collecting those codes!
Contest entry code: 5caixm
PHISHING SCAMS
Give your emails 100% of your attention. Watch out for emails about:
• Cisco WebEx vulnerability
Stop and think before you click.
SECURITY BREACHES
Change your password if you use one of these websites or applications. Watch for signs of identity theft.
• Easyjet • LiveJournal • Mathway
Keep your accounts safe, use a unique password for each one.
OTHER NEWS
• Michigan State University hit by ransomware gang • What is the dark web? Your questions answered, in plain English • Apple iPhone at risk of hacking through email app • Does Your Phone Eavesdrop On You? It Can but Not Necessarily Does
Find out how hackers use your internet connected devices to attack others.
MUST READ
• Fake Canada Post notifications arriving in MRU inboxes
CYBERSECURITY CHALLENGE
Search for contest entry codes in the newsletter. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco.
Congratulations to the Campus Health Team for passing the Faculty of Arts Team on the leader board!
PHISHING SCAMS
Give your emails 100% of your attention. Watch out for emails about:
• WHO COVID-19 SITUATION REPORT
Stop and think before you click.
COMPROMISED & FAKE APPS
If you have one of these apps, you may have a virus on your device.
• Untappd
Avoid fake apps, only download ones with good reviews from reputable sites.
SECURITY BREACHES
Change your password if you use one of these websites or applications. Watch for signs of identity theft.
• Wishbone • Edison Email
Keep your accounts safe, use a unique password for each one.
Contest entry code: 8fzg6w
OTHER NEWS
• Coronavirus pandemic coincides with spike in online puppy scams • Hackers Are Taking Over Twitter Accounts to Advertise Face Masks • Why You Shouldn’t Use Your Web Browser’s Password Manager • Crooks are using realistic-looking webpage templates to trick you into handing over personal data
If you connect to your desktop, you are using RDP. Let NASA lego show you how to keep the connection safe.
MUST READ
• Fake COVID update from the President circulates through Nova Scotia Community College • Fake invoices showing up in MRU inboxes • No, you don't have email restrictions
CYBERSECURITY CHALLENGE
Search for contest entry codes in the newsletter. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco.
Congratulations to the Faculty of Health, Community and Education Team for moving past the Faculty of Business & Communications Team! Way to go!
Contest entry code: eaqy9k
PHISHING SCAMS
Give your emails 100% of your attention. Watch out for emails about:
• Tech Support Child pornography warning • DHL delivery • Microsoft Teams notifications
Stop and think before you click.
COMPROMISED & FAKE APPS
If you have one of these apps, you may have a virus on your device.
• Coinbase
Avoid fake apps, only download ones with good reviews from reputable sites.
SECURITY BREACHES
Change your password if you use one of these websites or applications. Watch for signs of identity theft.
Keep your accounts safe, use a unique password for each one.
OTHER NEWS
• Privacy expert says flawed Alberta COVID-19 contact tracking app shouldn’t have been released • Hackers target remote workers with fake Zoom downloader • York University cyber attack looks like ransomware, says security expert • Fake Canada website among many using COVID-19 relief offers to phish for credentials
A fascinating peek into the world of Russian hacking (15 min).
CYBERSECURITY CHALLENGE
Search for contest entry codes in the newsletter. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco. Contest entry code: i2c5xa
PHISHING SCAMS
Give your emails 100% of your attention. Watch out for emails about:
• Zoom meeting invite from HR • Outlook/Exchange scheduled maintenance
Stop and think before you click.
SECURITY BREACHES
Change your password if you use one of these websites or applications. Watch for signs of identity theft.
• Nintendo
Keep your accounts safe, use a unique password for each one.
OTHER NEWS
• When in Doubt: Hang Up, Look Up, & Call Back • Unproven Coronavirus Therapy Proves Cash Cow for Shadow Pharmacies • Would You Have Fallen for This Phone Scam? • Google Docs, Drives, Sheets, Slides users: Sharing files just got easier and more secure
Let Lego and the dark side show you how to make your home router secure.
MUST READ
• Criminals are creating look-a-like MRU websites • Fake WHO donation emails have arrived in MRU inboxes • No payroll isn't asking you to confirm your email account • The online training is changing
CYBERSECURITY CHALLENGE
Search for contest entry codes in the newsletter. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco.
PHISHING SCAMS
Give your emails 100% of your attention. Watch out for emails about:
• COVID testing • Meeting with HR • Document sharing
Stop and think before you click.
SECURITY BREACHES
Change your password if you use one of these websites or applications. Watch for signs of identity theft.
Keep your accounts safe, use a unique password for each one.
OTHER NEWS
• TikTok app inherently unsafe and a privacy risk • Understanding the dangers of social networking questionnaires • Linksys asks users to reset passwords after hackers hijacked home routers last month • How to avoid having your Google meeting bombed
Contest entry code: fwui6o
WANT TO LEARN MORE?
Looking for more cybersecurity tips, tricks and news? Visit the MRU Cybersecurity Hub at mru.ca/cybersecurity you can also find old newsletters in the archives. Have comments, suggestions or ideas on how to make the newsletter better? Email me at bpasteris@mtroyal.ca.
Did a friend forward you this newsletter? Subscribe and you can receive your own copy delivered to your inbox every Friday.
• Credit Registration stops a cybercriminal • Big yellow banner bad, sometimes • COVID-19 phish shows up in MRU inboxes
CYBERSECURITY CHALLENGE
Search for contest entry codes in the newsletter. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco.
This week we had lots of participation in the Challenge. Kudos to the Faculty of Arts and Campus Health teams, they have moved past the Organizations team!! Another shout out to the Faculty of Science & Technology team for moving past the Business & Retail Services team!! Way to go teams!
PHISHING SCAMS
Give your emails 100% of your attention. Watch out for emails about:
• Sextortion emails are back – don’t let them scare you! • Flight refund scam
Stop and think before you click.
SECURITY BREACHES
Change your password if you use one of these websites or applications. Watch for signs of identity theft.
• Quidd
Keep your accounts safe, use a unique password for each one.
OTHER NEWS
• FBI Warns of Money Mule Schemes Exploiting the COVID-19 Pandemic • How Secure Is Video Conferencing? • RCMP, prime minister warn of text scam related to COVID-19 relief • "Corona antivirus" infects victims with malware
Avoid fake apps, only download ones with good reviews from reputable sites.
OTHER NEWS
• Threat actor selling access to a Canadian university’s domain • No Chrome doesn't scan for viruses • COVID-19 scam alerts • Google: Here's how Google Meet beats 'zoombombing' trolls
Some more tips on how to stay cybersafe when working at home.
MUST READ
• Shipping confirmation email showing up in MRU inboxes • SRAS user guides on how to access files stored on the server and remotely connect to your campus workstation have been updated
CYBERSECURITY CHALLENGE
Search for contest entry codes in the newsletter. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco.
PHISHING SCAMS
Give your emails 100% of your attention. Watch out for emails about:
• Word and Excel attachments
Stop and think before you click.
SECURITY BREACHES
Change your password if you use one of these websites or applications. Watch for signs of identity theft.
• Marriott International
Keep your accounts safe, use a unique password for each one.
OTHER NEWS
• Coronavirus and home working: Cyber criminals shift focus to target remote workers • Best Buy gift cards, USB drive used to spread infostealer • The UK Cabinet is meeting on Zoom… here’s the meeting ID • How to stay on top of coronavirus scams – and all the others too
• Working from home remotely document • Working off campus webpage
We apologize for any confusion that may have been caused.
CYBERSECURITY CHALLENGE
Search for contest entry codes in the newsletter. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco.
PHISHING SCAMS
Give your emails 100% of your attention. Watch out for emails about:
• Threats to infect your family with coronavirus • Data stolen from a friend • Coronavirus • Free Netflix
Stop and think before you click.
SECURITY BREACHES
Change your password if you use one of these websites or applications. Watch for signs of identity theft.
• Rogers • Tupperware
Keep your accounts safe, use a unique password for each one.
Contest entry code: bk4ck7
OTHER NEWS
• Microsoft says hackers are attacking Windows users with a new unpatched bug • WhatsApp “Martinelli” hoax is back, warning about “Dance of the Pope” • Working from home? Switch off Amazon's Alexa (say lawyers) • Zoom's iOS version is sharing user data with Facebook
• Take care of you and yours while working through a disaster • Working from home safely • If you don't report, we don't know • Coronavirus based attacks are rampant
CYBERSECURITY EVENTS
Participate in events while earning contest entry codes. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco.
Contest entry code: 3haedy
PHISHING SCAMS
Give your emails 100% of your attention. Watch out for emails about:
• Medical test results • Fighting coronavirus • The World Health Organization
Stop and think before you click.
COMPROMISED & FAKE APPS
If you have one of these apps, you may have a virus on your device.
• Coronavirus tracker • Coronalive 1.1
Avoid fake apps, only download ones with good reviews from reputable sites.
SECURITY BREACHES
Change your password if you use one of these websites or applications. Watch for signs of identity theft.
• Koodo • Blisk browser •NutriBullet • Truefire
Keep your accounts safe, use a unique password for each one.
OTHER NEWS
• Live Coronavirus Map Used to Spread Malware • Is Mobile Malware Playing Hide and Steal on Your Device? • Coronavirus Widens the Money Mule Pool • University of Waterloo warns students and staff of COVID-19 phishing scam
Participate in events while earning contest entry codes. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco.
The Business & Retail Services team is on fire! Congratulations for moving past the Faculty of Science and Technology to move into 4th place in the Cybersecurity Challenge. Go team Go!!
• Ask the Cybersecurity Awareness Expert - Mar 24 • Protecting yourself against cybercrime - Mar 26
Contest entry code: ycnh62
SECURITY BREACHES
Change your password if you use one of these websites or applications. Watch for signs of identity theft.
• Whisper
Keep your accounts safe, use a unique password for each one.
OTHER NEWS
• Fancy that: Hacking airliner systems doesn't make them magically fall out of the sky • Don’t install that security certificate; it’s a malware scam • 'This is really sick': Unemployed Calgarians fed up with online job scams • Android anti-virus products put to the test – which are the best at stopping new malicious apps?
Once again Jimmy Kimmel has his staff use social engineering to get people to tell him their passwords.
MUST READ
• Identity theft in 2020: Everyone is a target (a MRU employee tells their story) • MRU inboxes receiving very well done Netflix phishing email
CYBERSECURITY EVENTS
Participate in events while earning contest entry codes. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco.
A big shout out to the Faculty of Science & Technology team that rocketed past the Cont. Ed and the Business and Retail Services teams to move into fourth place!!
• Ask the Cybersecurity Awareness Expert: How do I get network access for a guest and other questions - Mar 24 • Protecting yourself against cybercrime - Mar 26
Contest entry code: 8wtnlr
PHISHING SCAMS
Give your emails 100% of your attention. Watch out for emails about:
Change your password if you use one of these websites or applications. Watch for signs of identity theft.
• Princess & Holland America Cruise Lines
Keep your accounts safe, use a unique password for each one.
OTHER NEWS
• Names, birthdays, email addresses of thousands potentially exposed in SFU data breach • The case for limiting your browser extensions • How to prevent a two factor authentication compromise • Ironpie robot vacuum can suck up your privacy
When it comes to granting access to documents and files, less is more.
MUST READ
• Only you can use your MRU account • What is a phish bowl and why you should care
CYBERSECURITY EVENTS
Participate in events while earning contest entry codes as part of the Cybersecurity Challenge. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco and gets your team closer to winning the Golden Superhero Award.
Watch out Teaching and Learning, the Faculty of Science and Technology just moved past you on the Cybersecurity Challenge leaderboard!
• Protecting yourself against cybercrime - Mar 26 • Ask the Cybersecurity Awareness Expert: How do I get network access for a guest and other questions - Mar 24
Contest entry code: 7rntwl
PHISHING SCAMS
Give your emails 100% of your attention. Watch out for emails about:
• Updating Office 365 credentials
Stop and think before you click.
SECURITY BREACHES
Change your password if you use one of these websites or applications. Watch for signs of identity theft.
• Slickwraps • KidsGuard
Keep your accounts safe, use a unique password for each one.
OTHER NEWS
• FBI recommends passphrases over password complexity • Don't worry, Alexa and friends only record you up to 19 times a day • 6 steps to secure your Windows 10 machine, because security defaults aren't enough • How to Fully Secure Your Mac with These 9 Steps
What exactly are those cookies that websites keep asking us to accept?
CYBERSECURITY EVENTS
Participate in events while earning contest entry codes. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco.
• Protecting yourself against cybercrime - Feb 26
COMPROMISED & FAKE APPS
If you have one of these apps, you may have a virus on your device.
• Epic Games store
Avoid fake apps, only download ones with good reviews from reputable sites.
SECURITY BREACHES
Change your password if you use one of these websites or applications. Watch for signs of identity theft.
• PhotoSquared • MGM Resorts
Keep your accounts safe, use a unique password for each one.
OTHER NEWS
• Here's how to stop those annoying text message scams • University of Saskatchewan hit with cyberattack • If I have https, do I need a VPN?
This Valentines day don't let your heart rule over your head.
MUST READ
• Fake UPS email showing up in campus inboxes • Our president isn't announcing a new Responsible Use of Technology policy • What do you do with those invites from Alignable?
CYBERSECURITY EVENTS
Participate in events while earning contest entry codes. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco.
• Protecting yourself against cybercrime - Feb 26
Contest entry code: ltwnrl
PHISHING SCAMS
Give your emails 100% of your attention. Watch out for emails about:
• Coronavirus and it's affect on shipping
Stop and think before you click.
COMPROMISED & FAKE APPS
If you have one of these apps, you may have a virus on your device.
• Malicious apps with positive reviews found on Google Play
Avoid fake apps, only download ones with good reviews from reputable sites.
OTHER NEWS
• Paranoid privacy tool can jam your smart speaker’s microphone • Canadian consumers stung by cellphone porting scam: ‘It’s the creepiest thing’ • Can You Tell a CRA Agent from a Scam Artist? • A dirty dozen of Bluetooth bugs threaten to reboot, freeze, or hack your trendy gizmos from close range
If you are at work and click on a link, you call the IT Service Desk. What do you do when you are at home? Watch this video to find out.
MUST READ
• Email from The Spamhaus Project is fake
CYBERSECURITY EVENTS
Participate in events while earning contest entry codes. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco.
We have a new Hack the Box record. A team from Enrolment Services completed it in 15 min! The previous record was 16 min for students and 18 min for employees.
• Spot the phishing email - Feb 11 • Protecting yourself against cybercrime - Feb 26
PHISHING SCAMS
Give your emails 100% of your attention. Watch out for emails about:
• Ashley Madison • Coronavirus
Stop and think before you click!
DANGEROUS APPS
• Twenty four malware containing apps found on the Play Store.
Avoid dangerous apps, only download those with good reviews from reputable sites.
OTHER NEWS
• Scam, spam and phishing texts: How to spot SMS fraud and stay safe • Anatomy of a “free” gift – how online surveys can harm your digital health • Canadian insurance company lost nearly US$1M in ransomware attack • Avast anti-virus collecting web browsing data
• When to use your @mtroyal.ca email address • Mount Royal University’s email policy clarified • Beware of tutors posing as MRU professors
CYBERSECURITY EVENTS
Participate in events while earning contest entry codes. Each code gives you one chance to win a $250.00 gift certificate from Best Buy courtesy of Cisco.
It's finally here! Hack the Box is next week, get a team together or sign up on your own, but don't miss out!
• Hack the Box - Escape Room Feb 5 • Spot the phishing email - Feb 11 • Protecting yourself against cybercrime - Feb 26
Contest entry code: nt4wrl
COMPROMISED & FAKE APPS
If you have one of these apps, your privacy may be compromised:
• Ring app for Android
Avoid fake apps, only download ones with good reviews from reputable sites.
OTHER NEWS
• FBI issues warning about lucrative fake job scams • 3 ways to browse the web anonymously • 5 ways to be a bit safer this Data Privacy Day • Facebook knows a lot about your online habits – here’s how to stop it • How to take charge of your Google privacy settings
Cybersecurity Challenge Update - Business & Retail Services passes Faculty of Continuing Education & Extension on the leaderboard
•Spot the phishing email - Main Street event Feb 11 • Hack the box returns on Feb 6 • Protecting yourself against cybercrime - Feb 26
SECURITY BREACHES
Change your password if you use one of these websites or applications. Watch for signs of identity theft.
• Microsoft customer service
Keep your accounts safe, use a unique password for each one.
OTHER NEWS
• Analysis of popular apps finds rampant sharing of personal data • You can now turn your iPhone into a Google security key • Dating apps share personal data with advertisers • Sextortion scam leverages Nest video footage to fool victims into believing they are being spied upon everywhere
Keep your accounts safe, use a unique password for each one.
OTHER NEWS
• I gave them everything: Woman out $20K after call-display spoofing scam • Beware of this sneaky phishing technique now being used in more attacks • Windows 7 end of life: Time to move on • Here's how you can still get a free Windows 10 upgrade
Phishing attempts are pretty funny when they are used in the real world.
CYBERSECURITY EVENTS
• Protecting yourself against cybercrime - workshop Jan 14 • Spot the phishing email - Main Street event Jan 23
COMPROMISED & FAKE APPS
If you have one of these apps, you may have a virus on your device.
• Camero • FileCrypt • callCam
Avoid fake apps, only download ones with good reviews from reputable sites.
OTHER NEWS
• Student scammed $8,000 won't be reimbursed because she used phone number digits as PIN • Digital inheritance - what happens to your digital presence when you die
• Protecting yourself against cybercrime - workshop Jan 14 • Spot the phishing email - Main Street event Jan 23
PHISHING SCAMS
Give your emails 100% of your attention. Watch out for emails about:
• Sextortion - price goes down and threats go up • Greta Thunberg
Stop and think before you click.
SECURITY BREACHES
Change your password if you use one of these websites or applications. Watch for signs of identity theft.
• Honda owners
Keep your accounts safe, use a unique password for each one.
OTHER NEWS
• Facebook will stop mining contacts with your 2 FA number • Ambitious scam wants far more than just PayPal logins • Hackers keep dumping Ring credentials online
