New Year, Same Scams

As we begin a new academic year, bad actors are taking advantage of unsuspecting members of the Drexel community with various types of scams. Scams are designed to solicit sensitive information or money from their targets. Some request passwords, social security numbers, etc., while others request payments be sent using payment apps such as Zelle, Venmo, Cash, etc. Scams can be sent via text messages, emails, or even phone calls. Common scams to watch out for:

• Phishing: Be aware of poorly written emails, text messages, or other forms of communication that contain questionable links. Verify the sender before accessing any links or attachments.
  
  
• Student Loan: Look out for emails, phone calls, texts, and websites promising to aid students with paying off their loans or forgiving them altogether.
  
  
• Housing: Bad actors scam students looking for off-campus housing or seeking roommates by impersonating landlords or subletters and requesting security deposit payments for housing they do not own.
  
  
• Fake Employment Offers: University students seeking part-time, flexible jobs should be on the lookout for positions that are ‘too good to be true’.

Fall Festivities!

October is National Cybersecurity Awareness Month. To celebrate, join our Chief Information Security Officer, Dr. Pablo Molina, and his team for an interactive virtual session on How to Become a Cyber Secure Dragon. Use your Drexel credentials to access this session at drexel.zoom.us/my/doctorp on Wednesday, October 11th at 11:00 AM ET.

We are also giving away t-shirts to students who attend the virtual session and complete the Drexel University Security Training (D.U.S.T.) by October 26th, 2023. To receive a t-shirt, you must complete the DUST training and bring your 'certificate of completion' on your mobile device or a hard copy to our table by the Mario Dragon Statue on October 26th, 2023, from 12:00 PM to 2:00 PM. Students who complete the DUST training from April 1 to Oct. 26, 2023, are eligible to receive a t-shirt. Students can access the training at drexel.litmos.com/ and complete the Student’s Drexel University Security Training.

IMPROVE YOUR SECURITY

Practice good password hygiene - Use complex passwords or passphrases where multiple words are strung together in an easy to remember way (ex: Ra1nbowSqu!dBlu3M@caroni), create different ones for every account, use a password manager, and implement multi-factor authentication (MFA) where possible.

Utilize multi-factor authentication – When possible, use multi-factor authentication for all your accounts. This combined with critical thinking are the two best ways to protect your online information.

Take the DUST training – This training will equip you with the knowledge on how to defend against common cyberattacks.

Follow best practices for social media – Utilize your critical thinking when using social media and remember do not accept connections from accounts you don’t know; be cautious of odd emails or posts originating from known accounts, as those accounts could have been hacked. For more information, visit drexel.edu/umac/focus-areas/social/security.

Secure Internet of Things (IoT) – The Internet of Things (IoT) refers to the web of devices in our world, and how those machines share data with each other and the Cloud. Devices such as Tesla, Google Home, Apple Watch, smart light bulbs, etc. are some examples of IoT devices. When working with an Internet of Things (IoT) device follow the manufacturer’s information security recommendations, including updating the devices frequently. For more information, visit Internet of Things (IoT) Best Practices.

ANOTHER ONE BYTES THE DUST

Get the knowledge you need to protect yourself and others against cyber threats such as phishing and job scams. Take the D.U.S.T. training and receive your SANS security training certificate! Students, faculty, and staff can enroll in the training by following instructions provided at drexel.edu/it/security/awareness-program/.

Information Security Resources

To stay informed about cybersecurity news, common scams, FAQs, and other information, visit the Drexel Information Security website at drexel.edu/it/security.

For tips on information security while learning and working remotely, please visit the Information Security Best Practices webpage.

Report any cybersecurity incident to informationsecurity@drexel.edu.