Phishing Awareness

COVID-19 and Cyber-crime

What is phishing?

Phishing uses fake emails or websites to collect usernames and passwords as well as bank account numbers, social security numbers, and other personal information. These emails and websites may look real, but they are actually designed to fool you into divulging information.

How to spot a phishing scam

You can identify a phishing scam by looking for email messages that:

• Create a sense of urgency
• Invoke strong emotions, like greed or fear
• Request sensitive data
• Contain links that do not appear to match legitimate resources for the organization that is contacting you
• Communicate urgent changes to the organization or your department that require you to click a link
• Claim you will lose your account if you don't click a link (emails from LETU about accounts always encourage you to contact our helpdesk at https://servicedesk.letu.edu 

Always remember that legitimate companies and organizations will never ask for passwords, social security numbers, and other sensitive data via email.

What to do with requests for sensitive or personal information via email

• Never reveal personal or financial information in an email, and do not respond to email solicitations for this information. This includes following links sent in email.
• Pay attention to the website’s URL. Malicious websites may look identical to a legitimate site, but the URL may use a variation in spelling or a different domain (e.g., .com versus .net).
• If you are unsure whether an email request is legitimate, try to verify it by contacting the company directly. Contact the company using information provided on an account statement, not information provided in an email. 
• Keep a clean machine. Keep all software on internet-connected devices – including PCs, smartphones and tablets – up to date on critical updates, and protected with an antivirus application (like Windows 10's built-in Defender) to reduce risk of infection from malware.
• Report and delete them (see below)

How to report suspected phishing email

• Check the Related Articles section of this article for information on reporting spam and phishing emails.