As any type of fraud, phishing can be extremely damaging and has already claimed victims on campus. Use these pages to find out more about phishing - what it is and what risks it poses. Don't get hooked! Learn how to protect yourself against phishing scams and identity theft. Show
What is Phishing?Phishing refers to different types of online scams that ‘phish’ for your personal and financial information (e.g., your passwords, Social Security Number, bank account information, credit card numbers, or other personal information). These messages claim to come from a legitimate source: a well-known software company, online payment service, bank, or other reputable institution. Some will use an organization's email address, logo, and other trademarks to fake authenticity. Phishing messages may also appear to be from a trusted friend or colleague. See below for details on phishing attacks at UMass Amherst. Phishing messages can come from a growing number of sources, including:
What is spear phishing? More sophisticated attacks, known as spear phishing, are personalized messages from scammers posing as people or institutions that you trust. They often collect identifiable information about you from social media or the compromised account of someone you know to make their messages more convincing. Never transmit sensitive information over email or social media, even if the message requesting information appears to be legitimate. Signs of phishing include:
For more information, see the FTC's page about Phishing. What are the Risks?Don’t be fooled! These are fraudulent communications that in most cases have nothing to do with the institution they claim to be affiliated with. Opening, replying, or clicking the links provided in these emails poses a serious security risk to you and the campus network. Some of the risks involved are:
Phishing Attacks at UMass AmherstMembers of the university community may have received more targeted phishing emails, asking specifically for their IT Account NetID and/or password. These fraudulent emails claim to be official university communications (or otherwise originate from a legitimate office on campus). Most will ask you to ‘immediately update’ your personal information or face serious consequences. Don’t be fooled! These emails do not come from UMass Amherst IT/UMass Amherst. They are fraudulent messages attempting to compromise your personal information. UMass Amherst IT will never ask for your IT Account password or other sensitive information via email or link. Note: UMass Amherst IT uses sophisticated email filtering software to automatically detect and block SPAM, phishing, malware, etc. To help mitigate risks, the filtering software and IT staff may take action including blocking or removing these types of emails. The email filtering software is not foolproof and some unwanted messages may get through. It is critical that you learn to identify phishing scams, take the appropriate steps to protect your computer and your information, and report messages to IT. Visit this page for instructions on how to report phishing messages to UMass Amherst IT. What kind of program has the ability to monitor what you are doing and typing through keylogging?A keylogger, sometimes called a keystroke logger or keyboard capture, is a type of surveillance technology used to monitor and record each keystroke on a specific computer. Keylogger software is also available for use on smartphones, such as the Apple iPhone and Android devices.
Which Internet threats that disguised as a useful program and allows hackers to get your information?Trojan. A Trojan disguises itself as desirable code or software. Once downloaded by unsuspecting users, the Trojan can take control of victims' systems for malicious purposes.
What refers to a program that runs in the background without you knowing it it has ability to monitor what you are currently doing and typing through keylogging?Spyware is a type of program that is installed with or without your permission on your personal computers to collect information about users, their computer or browsing habits tracks each and everything that you do without your knowledge and send it to remote user.
Which of the following acquires sensitive personal information like password credit card?Phishing is the attempt to acquire sensitive information such as usernames, passwords, and credit card details (and sometimes, indirectly, money), often for malicious reasons, by masquerading as a trustworthy entity in an electronic communication.
|