It is important for us all to learn about these scams and take steps to protect our personal information and stop fraudsters in their tracks. Two of the most common types of fraud that affect university communities are business email fraud and phishing.

Business email fraud

Business email fraud, also known as CEO fraud, is a type of scam in which fraudsters impersonate a high-level administrator, such as a dean or president and send emails to employees requesting sensitive information or money. 

To protect yourself from business email fraud, never respond to unsolicited emails that ask for personal information or money. If you receive an email that appears to be from a supervisor or a faculty, unit or department lead, verify the sender’s identity by calling them or using a known email address before responding.

Phishing scams

Phishing scams typically take the form of emails or text messages that appear to come from a trusted source, such as a bank or a government agency. The scammer then asks for personal information to be sent to them, which they can use to steal your identity or money. 

To protect yourself from phishing scams, never respond to unsolicited emails or text messages, always be cautious of emails that contain attachments and never send money or personal information to someone you do not know.

March phishing simulation

The university will run our annual Fraud Prevention Month phishing simulation in March. The email will likely be a notice about your tax information. Watch out for these three indicators of a possible scam:

1. Urgency or fear – the message will try to reel you in by triggering a fear response.
2. Suspicious links –  typos in domain names are a common trick, e.g. “umaniloba.ca.” 
3. Fictional department or unit – for example, the university does not have a “Tax Department.”

If you notice any of these warning signs, forward the message to spam [at] umanitoba [dot] ca immediately.

What else you can do

You can take several other steps to protect your personal information and stop bad actors. These include using strong passwords, regularly checking your credit report and being cautious when sharing personal information online. Additionally, stay informed about the latest frauds and scams, pay attention to university information security alerts and report any suspicious messages to spam [at] umanitoba [dot] ca.

Remember: Information Security Starts with You!

Security analysts are already warning Canadians to watch out for COVID-19 vaccine scams. We also continue to see an increase in fraud scams during tax season.

Protect yourself against fraud this tax season and throughout the year by learning how to recognize, reject and report a scam. 

Recognize

Fraudsters will use any communication vehicle–phone, email, text message, letter, website, social media–to try to get you to give up your personal information. Don’t let them.

You can recognize a scam by the urgency of the message and by the direct request for personal information such as a credit card number, bank account number or your bank account password. 

The University of Manitoba will never:

• Ask you for your login credentials or personal information by email.

The Canada Revenue Agency will never:

• Demand immediate payment by Interac e-transfer, bitcoin, prepaid credit cards or gift cards from retailers such as iTunes, Amazon, or others.
• Give or ask for personal or financial information by email and ask you to click on a link.
• Send you an email with a link to your refund.
• Threaten you with arrest or a prison sentence.
• Use text messages or instant messaging such as Facebook Messenger or WhatsApp to communicate with taxpayers about tax-related issues under any circumstance.

Source: Read more at Slam the scam!

Reject

Watch for the external message notice at the top of any email you receive to your UM email address. If the message comes from a person or organization you don’t recognize, delete it!

• Don’t react to scare tactics: All these attacks depend on scaring you, such as with a lawsuit or criminal charges, that your computer is full of viruses, or that you might miss out on a chance at a great interest rate. Don’t fall for it!
• Verify contacts independently: Legitimate companies and service providers will give you a real business address and a way for you to contact them, which you can independently verify on a company website, support line, etc.
• Know the signs: Does the message/phone call start with a vague information, a generic company name like “card services,” an urgent request or threat and/or an offer that seems impossibly good? Hang up or click that delete button!

Source: Protect yourself against fraud this tax season 

Report

Forward any suspicious messages to infosec[at]umanitoba[dot]ca.

Fraud Prevention Month phishing simulation

To help you recognize, reject and report an email scam, the university will be sending a phishing simulation email to all staff and faculty during Fraud Prevention Month this March.  Watch out for any suspicious messages in your Inbox and slam the scam!

Canadian anti-fraud resources

• Slam the scam – Protect yourself against fraud – Canada Revenue Agency
• National Cyber Security Alliance
• Canadian Anti-Fraud Centre
• Report fraud and cybercrime – Canadian Anti-Fraud Centre

The university’s Information Security and Compliance Team uses a number of tools to ensure your data is as safe as possible, but it is important that every individual who uses the network be aware of the tricks cyber criminals use to access our valuable information.

Over the last three years, the university has implemented a phishing simulation program to help staff and faculty recognize suspicious emails. This year, we are extending the program to students.

Monthly phishing simulations

Starting this October, some students will receive a suspicious looking email message in their myumanitoba.ca Inbox. The phishing simulation messages are designed using popular social engineering techniques and contain common markers that identify a suspicious email message.

These tests will continue every month to the end of the Fall-Winter school year.

What is phishing?

Cybercriminals use phishing—a type of social engineering—to manipulate people into doing what they want. Social engineering is at the heart of all phishing attacks, especially those conducted via e-mail.

Social engineering is the art of manipulating people so they give up confidential information.  Perhaps you’ve seen an email that looks like it came from TD Bank asking you to click on a link, and the link went to a website asking for more personal information? This is an example of social engineering. Attackers will try to fool you into believing they are trustworthy.

Phishing Checklist

Use the checklist below to verify the message. If the message matches one or more the criteria below, DELETE it or forward it to spam[at]umanitoba[dot]ca for confirmation.

Any message from an unknown sender could be a phishing email:

1. Does the address match the sender name? If there is no match, it could be a phish
2. Is the email signature too generic? If there is only a name or title at the bottom of the message, then it could be suspicious.
3. Do the name and URL match? Think before you click. Mouse over links in email to reveal their true URL. If the name and the URL do not match, DELETE the email.
4. Does it contain an unexpected attachment? They are a cybercriminal’s #1 choice for spreading malicious software.
5. Does that email feel ‘off’ in some way? It probably is. Forward it to spam[at]umanitoba[dot]ca to confirm the message.
6. Is it urgent? Slow down. An “IMPORTANT MESSAGE” may be a phishing attempt. Cybercriminals want you to do what you’re told, when you’re told.

Don’t be fooled.  Information Security Starts With You!

Go to the Information and Security Compliance website for more information and for list of the latest phishing alerts.

Compared to last year, the simulation saw a slight decrease in the number of people who clicked the link — 6.7% compared to last year’s 6.8%. 

The results also showed that of the 6.7% who clicked the link, many were repeat offenders.

“Given the global coverage of our community, this is not surprising,” says David Treble, IT Security Officer. “Sometimes users travelling outside the country are more apt to click links that stress urgency or action, as they may not wish to be inconvenienced while travelling.  Other times a phishing email may be timed nicely with real life events, like tax time. ”

Regardless,  the trend over three years of the same phishing simulation shows a gradual decrease in staff and faculty who click the link. 

To avoid falling for a tax-phishing scam, follow these three simple tips:

• Don’t open it. Most tax-related government agencies do not initiate contact by email, text message or social media. If the email mentions tax forms, it is likely a scam. Either delete the email or forward it to spam@umanitoba.ca for review.
• Verify the sender. Don’t assume an email is legitimate by looking at the header– it’s easy to fake a From: or Reply-to: Call the sender to confirm the request is legitimate.
• Check if the URL is correct. Don’t be misled by sites claiming to be a government agency or tax-software company. Just mouseover any link to verify the URL it is really linked to. Make sure URLs are spelled correctly too. 

Think before you click!

About email simulations

Simulated email messages provide a realistic experience in a safe and controlled environment. They are designed to help us recognize and resist tactics used in real phishing attacks.

Periodic simulations will continue as a part of the university’s Cyber Security Awareness Campaign.

Remember, information security starts with you!

For more information about phishing attacks, visit the Information Security and Compliance web page at http://umanitoba.ca/computing/ist/security/phishing.html.

Phishing simulation results

Last month, two phishing simulation email messages were sent to staff.

According to the October phishing simulation results, our university staff can certainly recognize a phish.

Only 1.6% (down from 2% last year) clicked on the link in the first email and 2.8% (no change from last year) clicked on the link in the second email.  Great job!

Remember, when you see a suspicious email, don’t click on the link! In some cases even clicking on a link may cause trouble. Clicking on a suspicious link in an email can be risky because the website may not just be a phishing page asking for your credentials.  The web page may contain malicious code that will attack a vulnerability in your browser, which may then infect your computer with malware such as ransomware or spyware that can steal data.

Phishing Training Contest

1,665 staff and students viewed UM Learn Phishing Module. Congratulations to the iPad draw winner, Michael Gusak! We hope you get lots of use out of your new iPad. Don’t forget to ensure that your new mobile device is secure.

Cyber Security Poster Contest

We received seven poster contest submissions. Thank you to Neil Marnoch, Registrar’s Office; Karen Meelker, Access and Privacy Office; Brandy Usick, Student Engagement and Success; Patrick McCarthy, Information Security; and David Treble, Information Security who selected the winners based on their creativity, use of colour and clear message about cyber security. 

Congratulations to our winners!

First place: Imaobong Udofa

Cyber Security Contest Poster First Prize Winner – Imaobong Udofa

Second place: John Baptista

CyberSecurity Contest Poster Second Prize Winner – John Baptista

Third place: Akila Ambagala

Cyber Security Month Poster Contest Winner Third Place – Akila Ambagala

For more information, visit the Information Security and Compliance web page at http://umanitoba.ca/computing/ist/security/phishing.html

A summary of the results from the March simulation is below:

• The simulation email was sent to 5,950 faculty and staff.
• 587 users clicked on the link (9.87%).
• 208 users reported the email to spam@umanitoba.ca
• 183 users reported the email to the Service Desk.
• 19 phone calls and 12 emails to the Payroll Help Desk.

Compared to previous tests in October and January, this simulation saw a rise ­— from 4% to almost 10% — in the number of users who clicked the link.   Users who reported the email commented that this one was particularly well done.  The U of M branding, the closing from HR, the reference to the CRA and university T4 information coupled with receiving the email during tax season, were all very convincing and may have accounted for the higher percentage of clicks in this simulation.

Users who clicked the link were presented with an infographic showing ways to recognize phishing emails.

Simulated emails are designed to provide a realistic experience in a safe and controlled environment. They help users recognize and become more resilient to tactics used in real phishing attacks.

Periodic simulations will continue in order to educate users on how to recognize phishing attacks and help prevent cyber security exploits.

Remember, information security starts with you!

For more valuable information about phishing attacks, visit the Information Security and Compliance web page at http://umanitoba.ca/computing/ist/security/phishing.html
If you have any questions, please contact the Service Desk at 204-474-8600 or servicedesk [at] umanitoba [dot] ca. If you receive a suspicious email, delete it or forward it to spam [at] umanitoba [dot] ca.

You have probably seen some kind of phishing email already, although you may not even have known it was a phishing email. For example, you may have received an email asking you to verify your account information for your Bank of America account, or PayPal account, when in fact you don’t have an account with either of them.

Did you know? In an average month, approximately 10 million emails go through our mail filter! 70-80 per cent, or 7-8 million, are blocked because they are spam. However, some phishing emails still get through and users need to be cautious.

Links to fake web sites

One of the ways in which attackers lure you to their fake web sites is through malicious links contained within emails. An attacker will use emotional hooks, such as fear or sense of urgency, to get you to click on the link within the email before you take the time to see where the link takes you.

Links to web sites are common in emails, but you should always treat links with caution. Links can direct you to fake web sites that:

• Install malicious software on your computer as soon as you visit them.
• Mimic legitimate login screens to steal your username, password and other sensitive information.
• Prompt you to install content or download a file. If you are instructed to do this, click “No”.

Identifying malicious links

To find out where a link is really taking you, hover over it with your mouse pointer. If the Universal Resource Link (URL) that is displayed:

1. Is only an IP address.
2. Does not match the link that is shown in the email content.
3. Is long and confusing but includes a familiar term.

Chances are it is a malicious link and you should NOT click on it.

What to do if you come across a malicious link

Knowing how to see what a link is going to take you can help you identify phishing emails before you fall victim. If you see a URL that looks suspicious, delete the email or forward the email to spam@umanitoba.ca.

For more information about phishing visit http://umanitoba.ca/computing/ist/security/phishing.html

IST Security Alert

You may recently have received an email with the subject of “University of Manitoba: E-mail Account Update” or  “UM ALERT: UPDATE YOUR E-MAIL ACCOUNT.”

These are not legitimate emails. When in doubt, toss it out.

If you have received either of these emails:

• Delete the message.
• Do not click the link or visit the webpage it directs you to because it is a phishing scam used to collect log-in credentials.
• If you have visited the link and have logged in, you should reset your password.
• If you require assistance, contact the service desk for assistance with resetting your password (information below).
• Remember to be very cautious with all account emails.

How to spot phishing attempts

What is phishing?

Phishing is the practice of luring unsuspecting Internet users to fake websites by using authentic-looking emails with attachments or links to websites in an attempt to steal passwords, financial or personal information, or to introduce virus attacks.

You have probably seen some kinds of phishing email already, even if you didn’t realize it was a phishing email. For example, you may have received an email asking you to verify your account information for your Bank of America or PayPal account, when in fact you don’t have an account with either of them.

The best way to protect yourself against phishing emails is to know how to spot them. Below are some of key things to watch for. This information will help you protect against phishing scams.

1. Emails that try to play on your emotions should be treated as suspicious. Phishing emails often try to play on your emotions by:

• Promising a financial reward of some kind if you click a link and enter your log-in information. If an email offers you something that is too good to be true, it probably is!
• Urging you to perform an action before a strict deadline. Phishing emails will try to fluster you by creating a sense of urgency.
• Promising to show you something secretive or exciting. Phishers try to take advantage of your curiosity.
• Threatening you with negative consequences if you don’t perform an action.

2. Inspect your emails and watch for suspicious indicators such as:

• A signature block that is very generic and/or doesn’t follow company standards.
• A sender address that is different than the sender name.
• An email tone that is not what you would normally expect from your co-workers or friends.

3. These suspicious elements are commonly found in phishing emails:

• An email attachment from someone you don’t know OR an email attachments from someone you know, but weren’t expecting.
• Links to web pages that look like authentic login pages.
• Email links that don’t match the real URL.

Information security starts with you — don’t let a phishing scam reel you in!

Protect yourself and the University. Remember:

• Don’t open unexpected attachments;
• Don’t give up your personal information; and
• Don’t click links without checking.

If you receive emails that you are uncertain about, be safe. DO NOT click any links. Delete or forward the email as an attachment to Servicedesk [at] umanitoba [dot] ca

IST Security Alert web button.

Note: This web button (left) on any U of M webpage indicates an IT security alert; you can click to follow the link for more information.

Read the previous UM Today article on phishing scams.

See the Information Security & Compliance website.

For help or more information contact:
IST Service Desk
Information Services & Technology
University of Manitoba
123 Fletcher Argue
230 Neil John MacLean Library
204-474-8600
Servicedesk@umanitoba.ca

Save

Save

Save

Save

Save

Save

A very warm welcome back to the University of Manitoba for all students, faculty and staff. With another year ahead of us come the very annoying and potentially harmful phishing and spam emails trying to get us to share private information.

The University of Manitoba stops millions of phishing attempts, spam emails, and virus infected messages every month. In fact we blocked over 8.4 million of these types of emails in the month of August alone. However, attackers’ methods change very quickly in an attempt to stay ahead of our blocking techniques. Due to the large range of use for our email, we must also be careful not to implement a filter which may block otherwise legitimate email from our users. So for the phishing and spam emails that do get through our filters we do need your help!

Below are some helpful tips on recognizing these types of emails and what you need to do to ensure you are not putting your personal information or the University of Manitoba’s assets and data at risk.

What is Phishing?

Phishing is typically an email scam designed to trick you into thinking a legitimate organization is requesting private information such as usernames, passwords, social insurance numbers and credit card details that is then used for fraud or identity theft. These scams ask you to send a reply, download an attachment or follow a link. The page may look exactly like an official website, but it is designed to steal your credentials or drop malicious software on your computer.

What does a Phishing email look like?

Phishing emails typically consist of:

• threats of account closure
• mentions of “upgrades” that require changes to your account
• “verification” of your account
• any request for userid, password, or financial information
• requests to “click a link” for anything related to email or financial accounts
• generic wording in the salutation, body or closing signature
• technical deception to make a link in an email appear to look legitimate
• images instead of text in order to evade keyword filters
• forging real websites, logos or login pages
• targets of email accounts, online banking, credit cards, PayPal, Amazon, and parcel delivery.

It is very important to remember that the University of Manitoba will never ask for your password or confidential banking information in an email, and you should never send it via email for any reason.

How can I avoid phishing scams?

• All unsolicited emails related to your accounts should immediately be considered suspect.
• Avoid clicking links in emails; especially any that are requesting private information.
• Be wary of any unexpected email attachments or links, even from people you know.
• You can always check the destination of the link by placing your mouse over the link.
• Never click a link in an unsolicited email instead visit the organization’s website directly by typing a known address into your browser.

Who do I contact if I think an email might be Phishing?

If you receive emails that you are uncertain of, DO NOT click any links. You can either delete the email or forward the email as an attachment to Servicedesk@umanitoba.ca for review or you can contact the service desk for assistance:

Service Desk
Information Services & Technology
University of Manitoba
123 Fletcher Argue
230 Neil John MacLean Library
204-474-8600
Servicedesk@umanitoba.ca