Security Awareness Tips for November 2022

picture of computer in the library
Published | November 30, 2022

First Line of Defence

November 21st, Tip of the Week  | When it comes to phishing, it’s important to remember that users relying on university technology on a daily basis are the first line of defense in protecting against those who want to breach the network. Please keep security in mind each time you use your credentials to log into your W&L email, MyApps, Workday, Box, Office 365, and other productivity applications. If you’re unsure about a message you’ve received, be sure to contact the ITS Helpdesk (help@wlu.edu) and stay up to date with the most recent scam emails on our Phish Alert Page.

Holiday Shopping Season Scams

November 14th, Tip of the Week  | The holiday shopping season means new opportunities for scammers because of online orders and home package deliveries. A very frequent scam is where you receive an SMS or email telling you that a package is inbound, with a link to track the package. Hoping you will click a phishing link, bad actors will convey a sense of urgency, such as asking you to confirm an order or it will be returned and/or be be charged for something you didn’t order. Clicking the link can infect your device with malware, or it may direct you to a form that requires personal information or payment information, which can allow criminals to steal your identity or money.

If you receive suspicious emails, SMS or phone calls, rather than clicking on the link provided, instead go to the delivery carrier’s website directly or use the retailer’s tracking tools to verify the sender’s identity to avoid these types of scams.

Phishing Emails on the Rise

November 7th, Tip of the Week  | Phishing emails have seen a 61% increase in the rate of attacks compared to 2021.  Business phishing emails have always been effective and continue to be successful because of their potential to affect a user’s workday and routine. This quarter’s results reveal that 40% of phishing email subjects are HR related, creating a sense of urgency in users to act quickly, sometimes before thinking logically and taking the time to question the email’s legitimacy. A time-sensitive message can be your first clue that something isn’t right.

A Passphrase is Hard to Crack

October 31st, Tip of the Week  | The passphrase requires a few more keystrokes than its predecessor, the password. This simple fact makes it more secure, but also easier to remember when stringing together random words. W&L’s password (“passphrase”) policy eliminates the need for special characters and numbers, making it more convenient to type into mobile devices. Learn more about creating a passphrase with this infographic

You may also like…