Tips for Information Security
With the increase of phishing attempts and fraudulent emails, ITS urges students, faculty and staff to:
- CHANGE your password every 180 days.
- SET up Multi-Factor Authentication (MFA) for all of your personal and business accounts, where it is offered. MFA is required for CCU accounts. If you are a student and do not yet use MFA, please learn more and sign up by accessing the MFA for Students page.
- DO NOT open any suspicious email attachments. Fraudulent emails may be related to payroll/HR scams targeting employees (e.g. public employee benefits), bank alerts, fictitious "work-from-home" scams targeting university students, IT helpdesk and email quota/upgrade scams, etc.
- DO NOT forward suspicious emails.
- Contact ITS or SCS if you receive suspicious email messages or links to websites.
- DO NOT share your username and password via email, phone or on suspicious websites.
- DO NOT click on suspicious web links. Roll your cursor over links embedded in an email and look for inconsistencies in URL addresses.
- Make sure you log out successfully from all public computers, including instructional podiums and computers in computer labs, in order to protect your identity and privacy.
- Avoid using your CCU credentials (username and password) with external accounts such as online banking or social media sites.
Fraudulent emails may be related to payroll or human resources concerns targeting employees (e.g. public employee benefits), fictitious "work-from-home" offers targeting students, IT Helpdesk and email quota warnings, etc.
Please contact ITS at 843-349-5000 for assistance. Or send an email to ITS by copying the link – firstname.lastname@example.org – and pasting it in an email in the "To:" field.
Protect yourself: Always think before you click
Phishing/spam emails, links and websites may appear real. When in doubt, do not click links and delete the email immediately. If necessary, check with ITS at 843-349-5000 to verify and/or report fraudulent emails.
Be vigilant for fraudulent emails, phishing attempts and campaigns such as shipping notifications, ecards and fake advertisements – that may contain malicious links or attachments infected with malware. These can be sent via email or text.
Be mindful on social media as well, as phony posts can also be linked to malicious activity. Phishing attempts continue to rise worldwide. Such messages may say that your email storage is full and your email will stop working unless you click on a link to verify your account, etc. These are not legitimate emails and should be deleted immediately.
Remember, CCU will never ask you to verify your account in these manners. If you receive suspicious email messages or links to websites through your CCU account, check with ITS or SCS immediately and delete the suspicious email permanently.
- First and foremost, change your password regularly – at least every 180 days. Reset your password now »
- Never use your CCU credentials (username and password) for any other website, such as for online shopping, banking or social media.
- Be extremely wary of emails requesting information, such as asking for you to click to confirm your purchase. Instead of clicking, directly log in to the official website by typing the address yourself.
- Avoid opening unsolicited or embedded links in an email. Roll your cursor over the links and look for inconsistencies.
- Do not download suspicious attachments.
- Never reveal any personal or financial information in email, and do not respond to email solicitations for this information.
- Do not forward suspicious emails to others.
- Check with ITS on additional measures to enhance your email security.
- Only shop from a trusted computer (not a public one).
- Do business only with reputable online vendors. Verify the URL begins with https: (instead of http:).
- Make sure your anti-virus software is up-to-date.
- Similar to a “phishing” scam – where computer users receive an authentic-looking email that appears to be from their bank, Internet Service Provider (ISP), favorite store, or other organization – “smishing” messages are sent to you via text message on your mobile phone.
- Do not click on any URL sent to you as a link in a text message.
Clicked on a link you shouldn’t have?
- Change your password immediately. Do not reuse a previous password.
- Contact the account-related organization immediately.
- If you receive suspicious email messages or links to website through your CCU account, confirm with ITS immediately.
Various tips above are from the U.S. Department of Homeland Security.