If you have a security concern, or have recieved a suspicious text or email from somone
saying they are from UVU or Microsoft support you can email [email protected] or contact the UVU service desk at 801-863-8888.
Today, we are seeing incredible advances in AI and massive increases in attacks on
corporations and individuals. Cybercrime is being fueled by a cash bonanza of billions
of dollars, incentivizing ever evolving attack techniques. All of us need to remain
informed about current cybersecurity risks and adopt practices to protect ourselves
and others.
Phishing's Shift from Email to Texting and Calling: As awareness regarding email scams increases, adversaries are pivoting to more personal
mediums. Texts or calls, due to their immediacy, can lead individuals to lower their
defences.
SMS and Voice Phishing (Vishing): Criminals are now actively leveraging SMS and phone calls. These attempts involve
impersonating trusted entities, often prompting immediate action. Exercise caution
when encountering unsolicited messages or calls seeking personal or financial details.
Beware of Fraudulent Job Offers and Scholarships: Cybercriminals lure individuals with counterfeit job opportunities or scholarships,
often soliciting personal or financial details. Always vet any institution making
such offers.
Unauthorised Access via Stolen Passwords: Criminals frequently breach accounts using stolen passwords. Upon gaining access,
they might alter banking details, diverting funds like paychecks or financial aid.
The significance of deploying robust, unique passwords across all platforms cannot
be overstated.
Compromised Accounts and Extended Attacks: Once an account is breached, criminals often use it as a platform to send additional
phishing messages. In more targeted attacks, they might deceive family members into
sending money. Losing access to your account can harm not just you but numerous acquaintances,
amplifying the damage. Attackers can also install Malware and scareware that may cause your computer to act
abnormally with pop-ups, ask to install malicious files, applications or ask for ransom.
If you suspect you have scareware or a virus on your machine, please submit a ticket
with Service Desk for further escalation.
AI-assisted Scamming: Advanced AI tools, such as ChatGPT, enable scammers to craft messages that eliminate
typical grammar or spelling red flags. A polished message's authenticity should no
longer be taken at face value.
VPN Services and Cybersecurity: Criminals use consumer VPN services, commonly promoted on platforms like YouTube,
to mask their activities amid genuine end-user traffic. UVU affiliates are encouraged
to utilise the UVU campus VPN for secure connections when accessing open networks
or untrusted environments like hotels.
Passwordless Authentication: UVU strongly endorses Passwordless authentication using the Microsoft Authenticator app or a YubiKey. Not only is this method safer
than traditional passwords and text codes, but it's also faster and easier to use.
If you need help setting up Passwordless authentication, contact the UVU Service Desk.
Never Share Verification Codes: Retain the confidentiality of unexpected verification codes. Trusted entities like
UVU or Microsoft will never solicit these. Sharing them might jeopardise your account's
security.
Spam Emails: Any suspicious Emails or requests should be sent to [email protected]for further investigation by the security team.
