UVM InfoSec

Enterprise Technology Services' Information Security Office at the University of Vermont

[UVM InfoSec @uvminfosec]

Critical Outlook Vulnerability – Patch ASAP!
More info:
https://t.co/2Th5WXVMky

[UVM InfoSec @uvminfosec]

Today's phish is a bit more sophisticated than most - it references the end of the semester and leads to a site that nearly mimics our own single sign-on page. Check it out at https://t.co/04qQ4NTM7D

[UVM InfoSec @uvminfosec]

Mentioning Duo doesn't immediately make an email legit: Criminals combine their usual scare tactics ("VALIDATE YOUR ACCOUNT OR ELSE") with "expect a Push from Duo" to make an end-run around MFA. Suspicious email? Forward it as an attachment to [email protected] for help!

[UVM InfoSec @uvminfosec]

Welcome back! Today's phish says you have an overdue bill at UVM, and that you should go pay it at a non-UVM website. Please don't! Check it out at
https://t.co/04qQ4NTM7D

[UVM InfoSec @uvminfosec]

Three new phish this morning, all inspiring doubt by suggesting that you're about to lose access to services. Check out 'https://t.co/rKvBvoIvcG', '[email protected]', and 'Your password is about to expire!' at https://t.co/eTzfiOpJNX

[UVM InfoSec @uvminfosec]

If you've received an email with the subject "OVERDUE UVM PAYMENT !!!" or "URGENT NOTIFICATION !!!" - good news, you don't actually owe UVM $2.55!

(It's a scam, don't give them your info.)

For reference, check it out on the UVM Phishbowl:
https://t.co/f8F5dyVTCH

[UVM InfoSec @uvminfosec]

Gentle reminder - UVM's file transfer service can be found at https://t.co/uXroLCTGSq. Why would we send you elsewhere? Check out the latest phish at https://t.co/04qQ4NTM7D

[UVM InfoSec @uvminfosec]

I feel like I shouldn't have to say this but please also don't make that one your password.

[UVM InfoSec @uvminfosec]

Wooo it's #cybersecurityawareness month 🎉
As a gift for our birthday - consider not setting your password to "password2022" this year!
Having a hard time coming up with a better one? Relevant XKCD: https://t.co/zZIKxXnFz2

[UVM InfoSec @uvminfosec]

If the site has different character requirements? I gotchu:
"giraffe9buscemi9diamond"

[UVM InfoSec @uvminfosec]

Well, the phishers must be back from their Fall break Watch out for a widespread phish this morning (subject "UVM") with all the signs - threatening language, odd capitalization and punctuation, and a link that doesn't lead to https://t.co/farQ91riyn. https://t.co/04qQ4NTM7D

[UVM InfoSec @uvminfosec]

If you need assistance in patching your devices, contact the UVM Tech Team [https://t.co/VZqAbMinYV].
Proper security may start with secure devices, but it ends with your own digital hygiene.

[UVM InfoSec @uvminfosec]

Apple and Microsoft Users: Patch Your Devices ASAP (a thread)

[UVM InfoSec @uvminfosec]

In your system settings, find the software update section and update as soon as you are able. Otherwise, these critical vulnerabilities pose a threat to not only the security of your information, but also your access and control of your own devices.