Cyber Criminals Target Universities in Pay Rise Scam
Date: Feb 27, 2017
Action Fraud is urging university staff to take preventative action following more than 100 reports from victims receiving bogus pay rise emails.
Phishing emails claiming to be from university HR departments are being used by cyber criminals to gather financial details by suggesting that university staff recipients are due a pay rise.
However, when the recipients click on the link, they are taken to a fake website where they are asked to enter personal information, including university log in and financial details. Police forces and governmental agencies have also been targeted by similar emails.
Password Protect Accounts
University staff should change any passwords associated with their email accounts and IT accounts. Passwords should use a combination of letters, numbers and special characters, preferably using random words as opposed to those with personal meaning, such as children’s or pet’s names.
Software updates should always be installed as soon as they become available in order to offer fixes for critical security vulnerabilities.
Identify Phishing Emails
Campus-wide Security Awareness Training and Testing (SATT) ensures all staff can recognise a phishing email and take appropriate action. University staff learn how to avoid clicking on links or opening attachments in unsolicited emails or text messages.
This is achieved by combining interactive, video-based training, delivered at the desktop, with simulated and tracked cyber attacks. You can then be assured that you are minimising the risk of human error unwittingly unlocking access to University financial information, student and other data, and networks.
If you believe your bank details may have been compromised, you should report this to your bank immediately. Regional police forces are currently investigating the reports that have been received so far.
Stephen Proffitt, Deputy Head of Action Fraud said: “Phishing emails continue to be a serious problem. It is essential that those affected take the appropriate action to protect their personal details.”
Report fraud and cyber crime to Action Fraud and receive a police crime reference number.
Sign up for free to Action Fraud Alert to receive direct, verified, accurate information about scams and fraud in your area by email, recorded voice and text message.