Public Service Announcement - Cyber related scam targeting Universities
<p> <strong>Cyber-related scams targeting universities, employees and students</strong></p> <p> The internet Crime Complaint Center (IC3) is aware of multiple scams targeting universities, university employees, and students across the nation. The scams range from Internet fraud to intrusions. The following are common scenarios:</p> <ul> <li> Spear phishing e-mails are being sent to university employees that appear to be from their employer. The e-mail contains a link and claims some type of issue has risen requiring them to enter their log-in credentials. Once employees provide their user name and password, the perpetrator accesses the university’s computer system to redirect the employees’ payroll allocation to another bank account. The university employees’ payroll allocations are being deposited into students’ accounts. These students were hired through online advertisements for work-at-home jobs, and provided their bank account information to the perpetrators to receive payment for the work they performed.</li> <li> Scammers are posting online advertisements soliciting college students for administrative positions in which they would receive checks via the mail or e-mail. Students are directed to deposit the checks into their accounts, and then print checks and\or wire money to an individual. Students are never asked to provide their bank account information to the perpetrators.</li> <li> Perpetrators are compromising students’ credentials resulting in the rerouting of their reimbursement money to other bank accounts. The reimbursement money is from student loans and used to pay tuition, books and living expenses.</li> <li> Perpetrators are obtaining professors’ Personally Identifiable Information (PII) and using it to file fraudulent income tax returns.</li> <li> Some universities have been victims of intrusions, resulting in the perpetrators being able to access university databases containing information on their employees and students.</li> </ul> <p> If you have been a victim of one of these scams or any other Internet related scam, we encourage you to file a complaint with the IC3 at <a href="http://www.ic3.gov/">www.ic3.gov</a> and notify your university police.</p> <p> </p> <p> J. Douglas Streit, CISSP</p> <p> Chief Information Security Officer</p> <p> Director, IT Security, Records, and Project Management</p> <p> Information Technology Services</p> <p> Old Dominion University</p> <p> Office: 757 / 683-5424</p> <p> <a href="mailto:jstreit@odu.edu">jstreit@odu.edu</a></p> <p> </p> <p> </p>
Posted By: John Streit
Date: Wed May 14 11:37:56 EDT 2014