[{"id":3169,"date":"2022-05-31T10:15:36","date_gmt":"2022-05-31T10:15:36","guid":{"rendered":"https:\/\/blogs.vcu.edu\/phishing\/?page_id=3169"},"modified":"2022-05-31T10:15:38","modified_gmt":"2022-05-31T10:15:38","slug":"vcu-password-assistance-5-31-22","status":"publish","type":"page","link":"https:\/\/blogs.vcu.edu\/phishing\/vcu-password-assistance-5-31-22\/","title":{"rendered":"VCU Password Assistance (5\/31\/22)"},"content":{"rendered":"\n<p>The scam today focused on spoofing the user&#8217;s account to make the user think they were updating their password. <\/p>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1326\" height=\"547\" src=\"https:\/\/blogs.vcu.edu\/phishing\/wp-content\/uploads\/sites\/565\/2022\/05\/image.png\" alt=\"This is an example of a phishing email that was sent.\" class=\"wp-image-3170\" \/><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>The scam today focused on spoofing the user&#8217;s account to make the user think they were updating their password.<\/p>\n","protected":false},"author":894,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-3169","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/blogs.vcu.edu\/phishing\/wp-json\/wp\/v2\/pages\/3169","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.vcu.edu\/phishing\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/blogs.vcu.edu\/phishing\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.vcu.edu\/phishing\/wp-json\/wp\/v2\/users\/894"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.vcu.edu\/phishing\/wp-json\/wp\/v2\/comments?post=3169"}],"version-history":[{"count":0,"href":"https:\/\/blogs.vcu.edu\/phishing\/wp-json\/wp\/v2\/pages\/3169\/revisions"}],"wp:attachment":[{"href":"https:\/\/blogs.vcu.edu\/phishing\/wp-json\/wp\/v2\/media?parent=3169"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}},{"id":123,"date":"2012-03-01T03:43:10","date_gmt":"2012-03-01T03:43:10","guid":{"rendered":"http:\/\/wp.vcu.edu\/phishing-net\/?page_id=123"},"modified":"2012-03-01T03:43:10","modified_gmt":"2012-03-01T03:43:10","slug":"is-phishing-a-scam","status":"publish","type":"page","link":"https:\/\/blogs.vcu.edu\/phishing\/is-phishing-a-scam\/","title":{"rendered":"Is Phishing A Scam?"},"content":{"rendered":"<p>Yes, email scams known as\u00a0<em>phishing<\/em>\u00a0is a technique where a cyber criminal tries to gain access to a victim&#8217;s personal information through a scam email.\u00a0These emails or links contained in these emails typically\u00a0asks\u00a0for\u00a0the victim&#8217;s:<\/p>\n<ul>\n<li>Name<\/li>\n<li>Social security number<\/li>\n<li>User name<\/li>\n<li>Password<\/li>\n<li>Credit Card number and expiration date \/ CCV code<\/li>\n<\/ul>\n<p>They some time also asks for information that seems more benign such as:<\/p>\n<ul>\n<li>Date of birth<\/li>\n<li>High school you attended<\/li>\n<li>City of birth<\/li>\n<\/ul>\n<p>As these information can be used to reset your password to gain access to your account.<\/p>\n<p>The end goal for the cybercriminal is to gain access to the personally identifiable information of the victim and either sell the information or use the information to commit crimes.<\/p>\n<p><strong>Scammers often hide scam pages behind linked text. To see the real destination behind a link, simply hover your mouse over a link on a computer, or tap and hold the link on a mobile phone or tablet.<\/strong><\/p>\n<p><strong>In order to protect yourself, make sure you ensure the legitimacy of the email prior to responding to or clicking on any included links or attachments in the email. Especially if these emails require you to submit any of the information mentioned above.\u00a0<\/strong><\/p>\n<p>For\u00a0additional\u00a0information\u00a0concerning email scams known as phishing, visit the Information Security\u00a0article on\u00a0<strong><a href=\"http:\/\/www.ts.vcu.edu\/askit\/essential-computing\/information-security\/common-questions\/what-is-phishing\/\">phishing<\/a><\/strong>. For more information on phishing, scams, or other security related topics, please visit the <a href=\"http:\/\/go.vcu.edu\/infosec\"><strong>VCU Information Security Website<\/strong><\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Yes, email scams known as\u00a0phishing\u00a0is a technique where a cyber criminal tries to gain access to a victim&#8217;s personal information through a scam email.\u00a0These emails or links contained in these emails typically\u00a0asks\u00a0for\u00a0the victim&#8217;s: Name Social security number User name Password Credit Card number and expiration date \/ CCV code They some time also asks for [&hellip;]<\/p>\n","protected":false},"author":894,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"footnotes":""},"class_list":["post-123","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/blogs.vcu.edu\/phishing\/wp-json\/wp\/v2\/pages\/123","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.vcu.edu\/phishing\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/blogs.vcu.edu\/phishing\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.vcu.edu\/phishing\/wp-json\/wp\/v2\/users\/894"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.vcu.edu\/phishing\/wp-json\/wp\/v2\/comments?post=123"}],"version-history":[{"count":0,"href":"https:\/\/blogs.vcu.edu\/phishing\/wp-json\/wp\/v2\/pages\/123\/revisions"}],"wp:attachment":[{"href":"https:\/\/blogs.vcu.edu\/phishing\/wp-json\/wp\/v2\/media?parent=123"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}},{"id":92,"date":"2012-02-29T19:57:12","date_gmt":"2012-02-29T19:57:12","guid":{"rendered":"http:\/\/wp.vcu.edu\/phishing-net\/?page_id=92"},"modified":"2022-08-31T14:23:33","modified_gmt":"2022-08-31T14:23:33","slug":"how-to-identify-scams","status":"publish","type":"page","link":"https:\/\/blogs.vcu.edu\/phishing\/how-to-identify-scams\/","title":{"rendered":"How To Identify Scams"},"content":{"rendered":"\n<p>Email scams, also known as phishing, come in many flavors. We try to help you protect your personal information below:<\/p>\n\n\n\n<p>Below is an example of a phishing scam email. While the email says from &#8220;Virginia Commonwealth University&#8221; one clue to indicate that this is a phishing attack is that the domain is not a <em>vcu.edu<\/em> domain email.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/blogs.vcu.edu\/phishing\/wp-content\/uploads\/sites\/565\/2021\/07\/Email-Example.png\" alt=\"Example of Phishing Email Header\" class=\"wp-image-3140\" width=\"386\" height=\"90\" \/><figcaption>Example of Phishing Email<\/figcaption><\/figure>\n\n\n\n<p><strong>Tell-Tale signs of a Email \/ Phishing Scam:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Sender address does not match the source of email<\/strong> (e.g. an email claiming to be from VCU, but was sent from yahoo.com)<\/li><li><strong>Sense of urgency<\/strong> (e.g. You have to click on a link to reinstate your account, or prevent your account from being suspended)<\/li><li><strong>Generic language<\/strong> (Look for things like &#8220;Dear customer&#8221;, &#8220;Dear user&#8221;, and &#8220;update your account&#8221; or &#8220;update your profile&#8221;)<\/li><li><strong>Poor spelling and grammar<\/strong> (Mis-spelled words, and grammar that doesn&#8217;t make sense)<\/li><li><strong>Illegitimate link<\/strong> (Hover your mouse above a link to see its true destination, see below for more details)<\/li><li><strong>Attachments from unknown sender<\/strong><\/li><\/ul>\n\n\n\n<p><strong>When you see a link in an email, it is very important for you to check the legitimacy of the link before clicking on it<\/strong>, as some of these links leads to malware and virus downloads that can infect your computer. To check for the true destination of a link, simply hover your mouse over the link, and the true destination of the link will appear next to the link, or near the bottom of your screen.<\/p>\n\n\n\n<p><strong>Additionally, attachments in emails can also be used to infect your computer or steal your information, and the attachments should never be opened if you are unsure of the legitimacy of an email.<\/strong><\/p>\n\n\n\n<p>The above email sends you to a&nbsp;phishing&nbsp;scam web page. While the page may look like the authentic VCU Central Authentication Page , the image below shows that the webpage has a non-VCU web address:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"686\" height=\"600\" src=\"https:\/\/blogs.vcu.edu\/phishing\/wp-content\/uploads\/sites\/565\/2021\/07\/Fake-VCU-Website.png\" alt=\"Fake VCU Website\" class=\"wp-image-3141\" \/><\/figure>\n\n\n\n<p><strong>How do I identify non-VCU web addresses?<\/strong><\/p>\n\n\n\n<p>Malicious web pages will always try to fool you into thinking that they are legitimate sites, one definitive way to identify whether if a link is legit is to look at the link destination. To look at the link destination without clicking on the link, you can simply hover your mouse over a link to reveal its true destination. In a browser, you can simply look at the URL or address bar at the top of your browser to identify the destination of a link. Please keep in mind that you should not click on links without verifying the link destination first.<\/p>\n\n\n\n<p><span style=\"color: red\"><strong>The link destination should always be read backwards, where the true destination always appear just before the first &#8220;\/&#8221; and after the &#8220;http:\/\/&#8221; or &#8220;https:\/\/&#8221;<\/strong><\/span><\/p>\n\n\n\n<p>For Example, the following screen shows a web page that appears to resemble the VCU web mail login page.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1131\" height=\"803\" src=\"https:\/\/blogs.vcu.edu\/phishing\/wp-content\/uploads\/sites\/565\/2021\/07\/Fake-Login-Website-2.png\" alt=\"Fake VCU Website\" class=\"wp-image-3142\" \/><\/figure>\n\n\n\n<p>However, upon close examination, you will notice that the link destination or URL is:<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.ts.vcu.edu\/media\/technology-services-migration\/askit\/images\/info-security\/maliciousurl.jpg\" alt=\"\" \/><\/figure>\n\n\n\n<p><span style=\"color: red\"><strong>Although &#8220;mail.vcu.edu&#8221; appears in the link, this is not a VCU page at all. As you can see below, the website in this case is fgdsgtdZx.com, as fgdsgtdZx.com appears right before the first &#8220;\/&#8221; and after the &#8220;http:\/\/&#8221; or &#8220;https:\/\/&#8221;<\/strong><\/span><\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.ts.vcu.edu\/media\/technology-services-migration\/askit\/images\/info-security\/maliciousurl2.jpg\" alt=\"\" \/><\/figure>\n\n\n\n<p>Clicking a link that looks innocent can compromise your account and cause it to be used to send thousands of spam emails. Remember,&nbsp;VCU will never ask you for your eID or password via email.<\/p>\n\n\n\n<p><b>How do I Report phishing emails and who do I contact for more questions?<\/b><\/p>\n\n\n\n<p>If you have any concerns about the validity of any email you receive, or to report a phishing scam please contact the VCU IT Support Center&nbsp;(828-2227, itsc@vcu.edu) for&nbsp;assistance.<\/p>\n\n\n\n<p>For more information and tips on how to identify phishing scams, please visit our <a href=\"http:\/\/go.vcu.edu\/emailtraining\" target=\"_blank\" rel=\"noopener noreferrer\">Phishing Prevention Training<\/a>.<\/p>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">Apple iOS Mail App:<\/h2>\n\n\n\n<div class=\"wp-block-media-text alignwide is-stacked-on-mobile\"><figure class=\"wp-block-media-text__media\"><img loading=\"lazy\" decoding=\"async\" width=\"576\" height=\"1024\" src=\"https:\/\/blogs.vcu.edu\/phishing\/wp-content\/uploads\/sites\/565\/2019\/12\/IMG_3519-576x1024.png\" alt=\"\" class=\"wp-image-2970 size-full\" srcset=\"https:\/\/blogs.vcu.edu\/phishing\/wp-content\/uploads\/sites\/565\/2019\/12\/IMG_3519-576x1024.png 576w, https:\/\/blogs.vcu.edu\/phishing\/wp-content\/uploads\/sites\/565\/2019\/12\/IMG_3519-169x300.png 169w, https:\/\/blogs.vcu.edu\/phishing\/wp-content\/uploads\/sites\/565\/2019\/12\/IMG_3519.png 750w\" sizes=\"auto, (max-width: 576px) 100vw, 576px\" \/><\/figure><div class=\"wp-block-media-text__content\">\n<p class=\"has-medium-font-size\">Click the Name<\/p>\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-media-text alignwide is-stacked-on-mobile\"><figure class=\"wp-block-media-text__media\"><img loading=\"lazy\" decoding=\"async\" width=\"576\" height=\"1024\" src=\"https:\/\/blogs.vcu.edu\/phishing\/wp-content\/uploads\/sites\/565\/2019\/12\/IMG_3520-576x1024.png\" alt=\"\" class=\"wp-image-2971 size-full\" srcset=\"https:\/\/blogs.vcu.edu\/phishing\/wp-content\/uploads\/sites\/565\/2019\/12\/IMG_3520-576x1024.png 576w, https:\/\/blogs.vcu.edu\/phishing\/wp-content\/uploads\/sites\/565\/2019\/12\/IMG_3520-169x300.png 169w, https:\/\/blogs.vcu.edu\/phishing\/wp-content\/uploads\/sites\/565\/2019\/12\/IMG_3520.png 750w\" sizes=\"auto, (max-width: 576px) 100vw, 576px\" \/><\/figure><div class=\"wp-block-media-text__content\">\n<p class=\"has-medium-font-size\">Click the Name Again<\/p>\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-media-text alignwide is-stacked-on-mobile\"><figure class=\"wp-block-media-text__media\"><img loading=\"lazy\" decoding=\"async\" width=\"576\" height=\"1024\" src=\"https:\/\/blogs.vcu.edu\/phishing\/wp-content\/uploads\/sites\/565\/2019\/12\/IMG_3521-576x1024.png\" alt=\"\" class=\"wp-image-2972 size-full\" srcset=\"https:\/\/blogs.vcu.edu\/phishing\/wp-content\/uploads\/sites\/565\/2019\/12\/IMG_3521-576x1024.png 576w, https:\/\/blogs.vcu.edu\/phishing\/wp-content\/uploads\/sites\/565\/2019\/12\/IMG_3521-169x300.png 169w, https:\/\/blogs.vcu.edu\/phishing\/wp-content\/uploads\/sites\/565\/2019\/12\/IMG_3521.png 750w\" sizes=\"auto, (max-width: 576px) 100vw, 576px\" \/><\/figure><div class=\"wp-block-media-text__content\">\n<p class=\"has-medium-font-size\">Voila! We can see this NOT a legitimate VCU email. Now we should forward this email to infosec@vcu.edu so they can take appropriate action.<\/p>\n<\/div><\/div>\n\n\n\n<hr class=\"wp-block-separator\" \/>\n\n\n\n<h2 class=\"wp-block-heading\">Apple iOS &#8211; Gmail App:<\/h2>\n\n\n\n<div class=\"wp-block-media-text alignwide is-stacked-on-mobile\"><figure class=\"wp-block-media-text__media\"><img loading=\"lazy\" decoding=\"async\" width=\"576\" height=\"1024\" src=\"https:\/\/blogs.vcu.edu\/phishing\/wp-content\/uploads\/sites\/565\/2019\/12\/IMG_3522-576x1024.png\" alt=\"This is a picture of the iOS Gmail App\" class=\"wp-image-2973 size-full\" srcset=\"https:\/\/blogs.vcu.edu\/phishing\/wp-content\/uploads\/sites\/565\/2019\/12\/IMG_3522-576x1024.png 576w, https:\/\/blogs.vcu.edu\/phishing\/wp-content\/uploads\/sites\/565\/2019\/12\/IMG_3522-169x300.png 169w, https:\/\/blogs.vcu.edu\/phishing\/wp-content\/uploads\/sites\/565\/2019\/12\/IMG_3522.png 750w\" sizes=\"auto, (max-width: 576px) 100vw, 576px\" \/><\/figure><div class=\"wp-block-media-text__content\">\n<p class=\"has-medium-font-size\">Click the \u2018tiny\u2019 arrow<\/p>\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-media-text alignwide is-stacked-on-mobile\"><figure class=\"wp-block-media-text__media\"><img loading=\"lazy\" decoding=\"async\" width=\"576\" height=\"1024\" src=\"https:\/\/blogs.vcu.edu\/phishing\/wp-content\/uploads\/sites\/565\/2019\/12\/IMG_3523-576x1024.png\" alt=\"This is a picture of the iOS Gmail App\" class=\"wp-image-2974 size-full\" srcset=\"https:\/\/blogs.vcu.edu\/phishing\/wp-content\/uploads\/sites\/565\/2019\/12\/IMG_3523-576x1024.png 576w, https:\/\/blogs.vcu.edu\/phishing\/wp-content\/uploads\/sites\/565\/2019\/12\/IMG_3523-169x300.png 169w, https:\/\/blogs.vcu.edu\/phishing\/wp-content\/uploads\/sites\/565\/2019\/12\/IMG_3523.png 750w\" sizes=\"auto, (max-width: 576px) 100vw, 576px\" \/><\/figure><div class=\"wp-block-media-text__content\">\n<p class=\"has-medium-font-size\">Great! Now we can see who sent this email. This is not a legitimate VCU email. Now we should forward this email to infosec@vcu.edu so they can take appropriate action.<\/p>\n<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Email scams, also known as phishing, come in many flavors. We try to help you protect your personal information below: Below is an example of a phishing scam email. While the email says from &#8220;Virginia Commonwealth University&#8221; one clue to indicate that this is a phishing attack is that the domain is not a vcu.edu [&hellip;]<\/p>\n","protected":false},"author":894,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"open","ping_status":"open","template":"","meta":{"footnotes":""},"class_list":["post-92","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/blogs.vcu.edu\/phishing\/wp-json\/wp\/v2\/pages\/92","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.vcu.edu\/phishing\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/blogs.vcu.edu\/phishing\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.vcu.edu\/phishing\/wp-json\/wp\/v2\/users\/894"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.vcu.edu\/phishing\/wp-json\/wp\/v2\/comments?post=92"}],"version-history":[{"count":0,"href":"https:\/\/blogs.vcu.edu\/phishing\/wp-json\/wp\/v2\/pages\/92\/revisions"}],"wp:attachment":[{"href":"https:\/\/blogs.vcu.edu\/phishing\/wp-json\/wp\/v2\/media?parent=92"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}]