ITS is performing maintenance on DenAI during the winter break. During this time, DenAI performance might be degraded or the service might be unavailable during certain times. If you experience issues, please try again after some time.

We appreciate your patience and understanding as we ensure the systems are up-to-date and secure. This post will be updated once the maintenance has been completed.

Zoom will be updated on Saturday morning, December 20, from 6:00 AM to 7:00 AM EST. This is a required update to ensure service continuity. This update does not change the Zoom experience.

While active Zoom meetings should not be impacted, you may not be able to log into the Zoom portal or the desktop app during this one-hour maintenance window. If you have any Zoom sessions scheduled during this time, logging in prior to 6:00 AM is recommended to avoid interruption.

Denison ITS is aware of multiple, ongoing phishing campaigns. These are very active campaigns, and they are attempting to steal account information in order to steal financial and student data.

This attack is targeting students, faculty, and staff. These campaigns contain a form (typically a Google Form) that requests personal information, including personal email addresses and/or Denison account passwords. The contents of messages vary, but they originate from similar sources. Recent phishing message subject lines include:

• IMPORTANT NOTICE: Extra cash flexible gigs
• General System Maintenance 12 / 15 / 2025— Act Fast!
• Flexible, Part-Time Personal Assistant – $30/hour

As a reminder, NEVER send your password in an online form except for the Denison SSO page. You can verify the SSO page is real by looking in the address bar: the address should say identity[.]denison[.]edu. NEVER provide a multi-factor authentication (Duo) code that you didn’t initiate through SSO, especially over SMS or text message.

If you have any questions or suspect you may have provided information to the attackers, immediately contact the Service Desk.

GRANVILLE, Ohio—Denison University has been made aware of a financial scam targeting faculty, administrative staff, and support operating staff. If you receive a suspicious message, please forward it to isitsafe@denison.edu.

What is the message trying to steal?

The message attempts to steal sensitive personal information, including social security numbers.

What do I do if I get a malicious message?

• Do not click links, call phone numbers, or reply to the message.
• Do not give your personal information.
• Report the message to Is It Safe by forwarding it to isitsafe@denison.edu.

How can I tell the message is malicious?

Denison’s ONLY partners for employee assistance are ComPsych (through the Employee Assistance Program, or EAP) and TIAA. You may receive legitimate communications from TIAA about your retirement accounts.

If you aren’t sure whether a message is malicious or not, forward it to isitsafe@denison.edu. 

Learn more about this contact campaign here.

We have observed an aggressive phishing campaign that has been targeting Denison over the past several weeks. This campaign has included multiple messages sent by different means, but all messages attempt to get a user to click on a link and input account credentials, such as usernames and passwords.

In this campaign, we have noticed impersonation of Denison accounts, including the Service Desk. This campaign includes a link or button that goes to a malicious webpage. We have observed the following domains.

• vdgmentorias[.]com
• du[.]vdgmentorias[.]com

Denison will never ask for your password by email, by Google Form, or by calling. If you receive such a message, please forward it to our reporting mailbox at isitsafe@denison.edu. If you have accidentally interacted with a message or think you might’ve sent credentials, immediately contact the Service Desk.

A tricky phishing attack is targeting Denison using Google Calendar invitations. Attackers are sending fake calendar invites, taking advantage of calendar invitation settings designed to make it easy to schedule meetings. 

This phishing technique sends a Google Calendar invitation directly to your calendar, which bypasses email spam filters. By default, Google automatically adds calendar invites directly to your calendar. The attackers’ invitations appear genuine alongside your real events, classes, and meetings.

What do I do if I get a suspicious Google Calendar invite?

• Select “Report as spam” in Google Calendar to report the event.
• Do not click “Accept” or “Decline.” This encourages the attacker to try again.
• Do not click links, call phone numbers, or reply to a suspicious event. 

Learn more about how to detect and stop these attacks here.