Security Tips
On this page:
- Common Email/Online Scams
- Recommendations & Best Practices for Laptops and Mobile Devices
- Mobile Device Security
Common Email/Online Scams
When in doubt, always contact ITS.
-
If you receive an email or text message from an unknown sender with an urgent call to action, ask ITS first as it is likely to be a phishing attack. PDFs/attachments can silently attack your computer. Attackers may try to steal your login credentials with fake login pages. Do not click any links or open attachments for any unexpected emails.
-
Messages that appear to come from a colleague that urgently/vaguely ask for your help. (usually a scam to purchase gift cards or wire money).
-
Pop-up windows on your smartphone, computer, or tablet that claim your device has been hacked and urges you to call a phone number or click a link are phishing attacks. The bad actor may be posing as “Microsoft” or some other well-known service provider and offer to “fix” your computer. Do not engage with these folks - call ITS instead.
-
Your bank will not call, text, or email you asking for your debit/credit card number, PIN, or 3-4 digit CVV code.
-
Do not use Google to search for applications that you would like to download/install on your computer. There are many counterfeit application downloads online that contain malware. Ask ITS.
- Do not Google for phone numbers of large service providers. Many don’t have phone numbers and the ones that are listed online are fake numbers posted by scammers. For example, Amazon.
Recommendations & Best Practices for Laptops and Mobile Devices
Our security recommendations - How can you stay secure?
- Do not click on any links or attachments in an email that you were not expecting or don’t directly know the sender
- Keep your software up to date
- Only use supported software/tools
- Run anti-virus/anti-malware software on every device
- Practice good web browsing habits and use a VPN
- Ask questions and report suspicious behavior ASAP!
Mobile Device Security
-
Keep your mobile devices and applications up to date (we recommend enabling the auto-update feature for iOS and Android
- Enable 2 factor or multifactor authentication on all online accounts that support the practice, including online banking and social media.
-
Each account should have:
- a unique password
- MFA (auth app recommended over SMS whenever possible)
- Password management (Dashlane)
When in doubt, always contact ITS. The scammers want you to feel pressure to act on these quickly. Contact ITS first – we will help you determine the legitimacy.