Dear UMBC Community,

Imagine a stranger secretly using your home internet or your laptop to hide their tracks. Recently, security experts have found that certain apps are doing exactly that! They are secretly turning personal devices into "digital masks" for cybercriminals. 

When you download a seemingly harmless app, it may contain hidden code that shares your internet connection with a global network of hackers. This makes their activity look like it is coming from your device and our campus.

How to spot strange activity on your device:

Your device might be working for someone else if you notice: 

• Performance Issues: Your phone or laptop suddenly runs slowly, gets hot for no reason, or has a battery that dies much faster than usual.
• High Data Usage: You see a massive spike in your internet data usage that you can't explain. 

Tips to keep your tech private: 

• Look Before You Click: Even in official app stores, check the reviews. If a simple app (like a flashlight or a calculator) asks for permission to access your files, contacts, or location, it's a red flag. 
• Beware of the "Too Good to Be True": Be skeptical of "cracked" software or free versions of paid apps. They often come with a hidden "tax" on your security. 
• Cheap Smart Tech: Very inexpensive "Smart Home" or Internet of Things (IoT) devices often have weak security, making them easy targets for hackers. 

What to do if you suspect trouble: 

If your device is acting strangely or you receive a suspicious email, do not click any links. Please forward any suspicious emails to the security team at security@umbc.edu.  

If you suspect a phishing or cybersecurity attempt, do not reply, click any links, or open any attachments. Instead, forward the email immediately to the security team at security@umbc.edu. Your report helps protect everyone!

Thank you all for your continued awareness and assistance in keeping our community secure.

Cybersecurity Assurance and Digital Trust
UMBC Division of Information Technology (DoIT)

Hello UMBC,

Cybersecurity isn't just a task for IT, it's a 24/7 commitment for our entire community. To help you navigate the ever-changing digital landscape, we are excited to launch the first edition of our cybersecurity newsletter.

In this inaugural issue, we dive into:

• Phishing Defense: How to spot "too good to be true" offers and urgent scams.
• Travel Safety: Keeping your data secure while researching or vacationing abroad.
• Latest Threats: Why you should be wary of TikTok scams and "Quishing" (QR code phishing).
• Policy Updates: Key changes to UMBC's Acceptable Use and Data Protection policies.

Read the newsletter attached!

Remember: If an email feels "off," it probably is. Forward suspicious messages to security@umbc.edu and help keep our campus secure.

Stay smart and stay safe!

 - Stacy Cahill

Chief Information Security Officer

University of Maryland, Baltimore County

Hello UMBC Community!

The Cybersecurity Assurance and Digital Trust Department (CADT) in the Division of Information Technology is tracking an active phishing campaign that has impacted our campus community. This particular phishing campaign is targeting users with a phishing link that leads to a webpage resembling myUMBC. Examples of the phishing emails can be found at the end of this post.

Compromised users have been notified and their account passwords scrambled to safeguard their accounts. They have also received personalized myUMBC posts informing them of the events.

If you have received notices from CADT, make sure you change your password to a long, unique value that you have not used on myUMBC or other services in the past. It is important that you do not provide attackers with your DUO two-factor authentication codes or accept push notifications you have not initiated.

Users who believe they have already clicked on the phishing links should contact security@umbc.edu to report the phishing email.

Thank you for assisting us in keeping the campus community safe!

Hello UMBC Community!

The Cybersecurity Assurance and Digital Trust Department in the Division of Information Technology has some tips for you to stay safe from financial scams that have recently taken place.

Attackers send phishing emails to trick unsuspecting victims into providing their user ID, password, and multifactor codes. Often, these phishing lures contain a link that redirects the user to a login page.

DoIT has observed cases where the attackers are mirroring legitimate login screens to capture credentials and multifactor authentication (MFA) codes in real time. The only indicator that something is amiss is the URL in the address bar.

Follow these general tips to safeguard your financial data and funds:

1. Use Strong & Unique Passwords: Never reuse your UMBC password on other platforms — including financial services such as BankMobile. Create unique passwords for each separate account.
2. Periodically Verify Your Personal Information: Log into your accounts and make sure all your information, such as linked financial accounts, billing address, phone number, and email addresses are correct.
3. Check the Link: Look over URLs and ensure you are accessing a trusted service. If you see a login page but the URL does not look legitimate, do not provide your password or MFA codes. It is best practice to bookmark trusted services to navigate to them directly.
4. Don't Give Away Your Secrets: UMBC and your financial institutions will never call, email, or text you to ask for your password or MFA codes.

If you give someone your password and MFA codes, you are handing them the keys to your account. This could result in financial loss or unauthorized activity for which you may be held responsible.

If you see something, say something! Report all phishing emails to security@umbc.edu.

Stay smart, stay safe!

Hello UMBC Community,

We rely on Duo two-factor authentication to protect our accounts, and it's an excellent defense. However, cybercriminals are always looking for new ways to get past our security. This week's topic is all about what to do if you receive a Duo push notification you didn't initiate.

You're working on your computer, not logging into anything new, and suddenly your phone buzzes with Duo push notifications, including SMS texts or phone calls from Duo. What's happening? This is likely an attacker who has obtained your password and is attempting to bypass Duo to access your account.

Your immediate action is critical.

• Do NOT Approve It: The most important thing is to never approve a Duo push notification you did not initiate. Approving it will give the attacker access to your account.

• Deny the Request: Decline the request on your phone.

• Report as Fraudulent: If you can, mark the notification as fraudulent.

• Change Your Password: Immediately change your password on a trusted device or computer. This will invalidate the password the attacker is using.

Remember, a Duo push notification is like a digital handshake. You must be the one to initiate it. If someone else is trying to shake your hand, don't approve the connection!

If you received a Duo push notification you did not initiate, deny the request, change your password, and immediately report the event to the security team at security@umbc.edu. Your report helps protect everyone!

Stay safe out there.

Hello UMBC Community,

In the digital world, Phishing is one of the most used forms of cyber trickery where attackers impersonate trusted sources to deceive you into handing over credentials or personal information. These attacks come in various forms. Learning about them will help you not fall victim to those emails.

Phishing attacks are emails that may look like important messages but are actually crafted by cyber criminals. The good news? With the right knowledge, you can foil their tricks and keep yourself and UMBC safe. These are some tips on how you can recognize phishing emails:

1. Requests for Your Password: UMBC will never ask for your password. Never submit your password on Google forms or Monday.com forms. Your password is for your eyes only!

2. Unexpected Calendar Invitations: Watch out for calendar invites from unknown senders. Delete them and never click suspicious links inside.

3. Fraudulent Offers: Be wary of unsolicited offers for gift cards or jobs that are too promising. Do not send your personal or financial information to anyone who requests it over email or text. Real job postings are on Handshake only!

4. Unexpected Attachments or Links: Did someone send you a weird file or link you weren't expecting? Is a link in an email suspiciously short or strange-looking? If it feels off, don't click or download it.

5. A Sense of Urgency: Phishing emails often try to rush you into action, like claiming your account will be "deactivated" if you don't click a link immediately. Always be suspicious of urgent, high-pressure requests.

6. Poor Grammar and Spelling: While not always a giveaway, many phishing emails contain noticeable spelling errors or awkward phrasing.

What to do if you get a suspicious email:

If you suspect an email is a phishing attempt, do not reply, click any links, or open any attachments. Instead, forward the email immediately to the security team at security@umbc.edu. Your report helps protect everyone!

Stay vigilant, and together we can keep our digital environment safe.

Catch a "Fish"!