网络钓鱼和垃圾邮件警报

• 该消息是未经请求的，并要求您更新, confirm, 或泄露个人身份信息(如.g.、社会安全号码、帐号、密码、受保护的健康信息).
• 这个信息制造了一种紧迫感.
• 该消息有一个不寻常的“发件人”地址或一个不寻常的“回复到”地址.
• The (malicious) website URL doesn’t match the name of the institution that it allegedly represents.
• 消息不是个性化的. 来自银行和其他合法来源的有效信息通常会提到你的名字.
• 这条信息有语法错误.

Phishing is the term for messages sent to individuals via e-mail or text message with the intent to fool unsuspecting recipients into providing personal information, 比如用户名, 密码和财务账户信息. They often employ social engineering tactics by creating messages that appear to be legitimate. 这些信息还可以引诱个人访问承载恶意软件的网站.

Spear phishing 与网络钓鱼不同的是，它针对的是特定的部门, 学院或学院, 寻求对受保护信息的未经授权的访问. These messages allegedly come from IT support staff or other professionals in a position of authority from within the targeted department, 学院或学院. As with phishing, these e-mails will attempt to trick users into divulging personal or financial information, 或者他们的证书, 或者诱使他们点击可能在电脑上安装恶意软件的链接.

E-mail spam 信息发送给很多人吗, 同时经常, that either contain web links to Internet websites that host malware or contain executable malware within the message designed to infect the computer when opened. 这些信息也被称为垃圾邮件.

Spoofing 目的是诱骗用户采取不符合他们最佳利益的行动. For example, users might be tricked into believing false information or divulging confidential information, 访问授权信息, passwords, 还有其他信息. Spoofing指的是:

• 未经许可冒充个人、组织、机构或服务器.
• 伪造原点. 据称，这些信息是由管理员发送的, 但它们实际上来自试图窃取账户的入侵者.

Quishing, 也被称为二维码网络钓鱼, 包括欺骗某人用手机扫描二维码. The QR code then takes the user to a fraudulent website that might download malware or ask for sensitive information.

Phishing emails may contain financial information that will make a victim react and fall for the phishing attack.

商业电邮入侵骗局
You receive an email from a vendor requesting you to send money to a different account. The email looks genuine, but it could be from a fraudster who got access to your vendor’s network

银行扮演

一个自称来自金融机构的人联系了你, regarding fraudulent activity on your account and asking you to transfer money from your account or send a payment somewhere else. When in doubt, end all communication with the scammer and call the number listed on the back of your debit or credit card.

Phishing emails may contain messages and links to make you reset your account so they can steal your username and password in a fake website that seems related to a well known website.

Phishing emails may contain links that prompt you to verify your account so they can steal your credentials when you enter them in.

Phishing emails may contain links about documents that seem legit to make a victim click or download from a suspicious link.

网络钓鱼邮件会向学生宣传虚假的工作机会.

Phishing emails may contain false messages about packages or mail sent to the victim.

Phishing emails may contain technical questions about your computer or your student email.

Phishing emails may contain images that seem like a written message in order for the victim to click and download something malicious.

Phishing emails may contain QR Codes, making it easy for students to scan and be a victim!

• DO call a company that you received a suspicious email from to see if it is legitimate, 但不要使用电子邮件中的电话号码. 查看公司最近的对账单，获取一个合法的电话号码.
• DO look for a digital signature/certificate as another level of assurance that senders are legitimate. 数字签名的邮件将在主题处有一个特殊的图像/图标.
• 是否调整您的垃圾邮件过滤器，以防止不需要的垃圾邮件.
• 一定要用常识. 如果你有任何疑问，不要回复. Contact the ITS Help Desk 如果你有任何问题.

• 不要打开你怀疑可能不合法的电子邮件. 如果它是合法的，并且个人试图联系你真的需要, 他们会尝试其他方法.
• 不要通过电子邮件发送信用卡或其他敏感信息.
• 不要点击链接. Instead, phone the company or conduct an Internet search for the company’s true web address.
• 不要打开来历不明的电子邮件或附件. Many viruses arrive as executable files that are harmless until you start running them.

If your email account is provided by Google or Microsoft, their clients have a reporting feature. as shown below: 

如果使用Outlook应用程序: 

Cyber Security & Infrastructure Security Agency helps individuals becoming victims of phishing scams by gathered phishing email messages and website addresses by simply forwarding them the emaiil to them. 

Forward to:  (电子邮件保护)

您可以将电子邮件发件人标记为骗局或垃圾邮件, 您的电子邮件提供商将屏蔽发件人地址并将其移至垃圾邮件列表.

如果你收到的邮件是诈骗邮件或网络钓鱼邮件. 简单地删除电子邮件后，你报告的电子邮件. 

不要惊慌，我们建议采取以下所有行动来限制任何风险:

• Change password 
• 运行反病毒扫描程序 
• 使用双因素身份验证
• 备份你的文件
• 检查交易