Your Personal Information, Your ID, and Password are valuable to criminals

Scammers are Taking Advantage of Fears Surrounding the Coronavirus.

• Learn of Coronavirus Scams
  https://www.consumer.ftc.gov/features/coronavirus-scams-what-ftc-doing
• Covid-19 Scam Alert
  https://www.us-cert.gov/ncas/current-activity/2020/05/21/cisa-irs-usss-and-treasury-release-joint-alert-scams-related

Keep Security in Mind While Working Remotely

SVSU-Working safely remotely.pdf
FBI video-conferencing guidelines.pdf

Computer Security is Everyone's Job: You can help keep SVSU secure

(Scroll down for Current Security News)

Protect Your Computer from Malware

• STOP before downloading or opening a file on your computer; review filename extensions. Not knowing file name extensions puts your computer at risk. 
• NEVER rely on the attached icon it can be easily faked. Always look at the file extension; it could have malware attached to it.
• KNOW file extensions are programs that run on your computer and could potentially infect your computer.
  • JS
  • .EXE
  • .COM
  • .PIF
  • .SCR
  • .HTA
  • .vbs
  • .wsf
  • .jse
  • .jar  
• PROTECT your computer today and apply four quick steps to show file name extensions.

If you suspect that your email account may have been compromised by responding to a phishing attack

• Change your password immediately. You can do this online on the my.svsu.edu portal (in the applications section) 
  or the “Quicklinks” tab on the SVSU home page.
• Call the ITS Support Center at 989-964-4225 or open a ticket at mysupport.svsu.edu.
• Inspect your Outlook rules. The attacker often modifies the rules to try and hide their presence. Outlook_InspectRules.pdf

Protect your computer and information by locking the screen or log out whenever you step away from the computer.

• Windows: windows key+L
• Mac: Command+Control+Q or Control+Shift+Power

Manage your password reset options

• Enroll in password reset. You can control how you can reset your password if you ever forget it -24x7 from anywhere. 
• Enroll now. Password Reset Enrollment.pdf

Be Careful with Email Attachments and Links

• Be skeptical of links in an email. These can easily lead to malware or a phishing site trying to get your password.  If possible go to that site the way you normally do. 
• Never open an attachment unless you are expecting it. Even if it seems to be from someone you know or a company that you deal with. From addresses are easily faked. 
• Contact the sender ask if they really sent it. Attachments often contain malware or viruses.
  • Stop. Do not automatically click the link.
  • Think. Examine the email, look for red flags, hover over the links.
  • Connect. Do not click the link if it looks suspicious, call the contact listed or go directly to the website. 

Be Careful with Microsoft Office Macros

• Word or Excel macros may be used to infect a computer with malware. These are rarely used and are turned off by default. Some malware may prompt you to enable macros. Do not enable macros unless you know that the document really needs macros to function. The grand majority of the time they are not needed.
• Windows Updates:
  • SVSU computers apply Microsoft updates automatically.
  • Make sure that your personal computers and devices are set to automatically apply updates. Most malware attacks are stopped by having current updates.
• Use STRONG passwords
  • The SVSU change password page requires strong passwords. Remember that the longer a password is the better.
  • Try using passphrases instead of passwords. Phrases are long and easier to remember.
  • Make sure that you are using strong passwords on other sites you use.
  • Be sure to use a different password on each site.
  • Never use your SVSU password on other sites. Here is a short video that explains passphrases. https://www.youtube.com/watch?v=XIySPpFHJCo

Learn how to Identify Phishing

• Identify Phishing by looking at the sender. The sender's address could be faked, but always start by looking at the sender's email address first. 
• If an email is claiming to alert you to a problem with one of your SVSU accounts but does not come from SVSU, it is probably not legitimate.
• Look for poor grammar and spelling. 
• Hover over the link. Make sure the address matches the link and it is an appropriate site.
• Scammers want your personal information. Don't give it to them.
  • Never follow a link in an email to a page that requires you to log in.
  • If you think that the email might be legitimate, go directly to that site by typing the URL into the address bar.

Ransomware is Malware that encrypts all the data on your computer. Be Aware.

• Ransomware compromises are up over 350% from last year. (dimensiondata.com)
• Ransomware is attacking, home users, businesses, hospitals, schools, even police departments.

CyberSecurity Resources

• Tips for Using Public Wi-Fi Networks (e.g. coffee shops, libraries, airports, hotels, universities, and other public places are convenient, but often they’re not secure).
• On Guard Online (Dept. Homeland Security)
• Stay Safe Online (Promoting a culture of Cybersecurity and Privacy)
• Stop | Think | Connect (Keeping the web a safer place for everyone) 
• Connect Safely (Internet safety, privacy, and security)

•   MediaPro - Another Phishy Email Video

• US-Cert: Avoiding Social Engineering and Phishing (Security Tip (ST04-014) Avoiding Social Engineering and Phishing Attacks)
• FEDERAL TRADE COMMISSION (10 Things You Can Do to Avoid Fraud)