Phishing
What is Phishing
Phishing scams are fradulant emails that attempt to trick you.
Below are several phishing campaigns run by the IT department to educate faculty and staff on how to recognize and defend against phishing attacks.
Campaign 12.14.2017
Email Sent
Campaign 1.9.2018
Email Sent
Campaign 2.6.2018
Email Sent
Campaign 2.27.2018
Email Sent
Campaign 3.15.2018
In this campaign, there are several ways to verify the safety of the content contained within the email. First refer to Campaign 12.14.17 to verify links are safe to click on within the email.
If you clicked the malicious link this campaign took you to what appears to look like a Google login screen. However, there are two ways you can tell that this is not really Google's website. First, if you look closely at the URL and you will notice that this is not something Google would do. (insert URL Image) Secondly, this webpage is lacking a lockpad to verify that the connection is secure.
These are examples of what to look for when a connection is insecure. (Insert browsers without lockpads)
A secure connection will have a lockpad to signal the connection is secure and your password will be safe in transmition. However, please note that attackers can use a secure connection to give you a false sense of security. Make sure to verify the URL is legitament. When it doubt ask!
These are examples of what to look for when a connection is secure. (insert browers with lockpads)
Campaign 4.17.2018
Email Sent
Campaign 5.8.2018
This campaign was designed to be more memorable by rather than listing a phishing test page, we mimicked a cliche malicious site. The email was designed to appear to be from a trusted payment company and require a login. At the point of login, credentials were asked for and then the website would redirect to a pseudo-malicious site. Phishing attacks such as these can be prevented by recognizing purchase history and manually checking links listed in emails. As the login page that appeared to be for southern, was actually not hosted on the correct link.
How to report Phishing Scams
Forward the message to phish@southern.edu
Call the IT HelpDesk at 423.236.2707