Update: 7:00 AM

The system maintenance work has now been completed.  Important:  If you have any login problems, and before contacting the ITS Help Desk, please clear your browser’s cache/cookies.  (Information for clearing your browser’s cache can be found here:  http://www.refreshyourcache.com/en/home/)

Continue reading

On Friday 2/17, Denison faculty and staff were sent a personalized CyberSecurity Awareness Training invitation from “do-not-reply@knowbe4.com”. This is a legitimate email and contains a link to training modules that will help you protect the college and yourself by better understanding common threats, phishing techniques, and safe technology practices. Click the personalized link in the email and then click the ‘Start Course’ button on your training page to begin your training. Please complete the training modules by 3/10/2017 5:00 PM.

IMPORTANT: It is important to close your course browser window to record course completion, or if you need to pause the training for an extended period of time. You will be allowed to resume your training when you log in again.

See this article from Pittsburgh Action 4 News for the many ways – including fake job offers – that hackers are trying to lure students, faculty, and staff into revealing their login and other personal information:

http://www.wtae.com/article/college-students-are-the-latest-targets-of-aggressive-phishing-scams/8730682

To learn more about detecting phishing emails, please see the quick & helpful 2-minute training video available through Atomic Learning about “Avoiding Phishing Scams” (https://www.atomiclearning.com/highed/almovie?sid=1596&cn=denison&key=25072).

To report a message as a phishing attempt within the Denison Apps Gmail web interface, within the message click the down arrow beside the Reply button and select “Report Phishing“.

If you have any questions about phishing, please contact the ITS Help Desk at helpdesk@denison.edu or 740-587-6395.

February edition:

Staying Secure on the Road

(https://securingthehuman.sans.org/newsletters/ouch/issues/OUCH-201702_en.pdf)

OUCH! is the world’s leading, free security awareness newsletter designed for the common computer user. Published every month and in multiple languages, each edition is carefully researched and developed by the SANS Securing The Human team, SANS instructor subject matter experts and team members of the community. Each issue focuses on and explains a specific topic and actionable steps people can take to protect themselves, their family and their organization.

———- Forwarded message ———-
From: Anne-Marie Musacchia
Date: Tue, Feb 7, 2017 at 11:52 AM
Subject: IT Security-Change your password.
To: “helpdesk@denison-edu.com”

IT Security-Change your password.

Your employee email account was accessed today from a suspicious device at
11:26:42 EST on a GlasNet Computer Network IP. We believe your password has
been compromised. Please click here
to change your current password
immediately.

Thank you.
Anne-Marie Musacchia – System Admin
IT Security & Risk Management;

This email may contain privileged, confidential and proprietary information
and is intended only for the personal and confidential use of the specific
addressee(s) identified herein. Your receipt of this email is not intended
to waive any applicable privilege, whether pursuant to the attorney-client
privilege or work product doctrine. If you have received this email in
error, please do not copy it or further disseminate or distribute it;
instead, immediately delete it along with any attachments and notify the
sender of such by separate email.

The email with a title of “Help Desk Incident #” followed by a number that appears to be from an “@louisiana.edu” address is a scam.

If you are using Denison Apps Mail:

Open the message and click the down arrow beside the Reply button and select “Report phishing” in the menu that appears. (Note: if “Report phishing” does not appear as an option and “Report not phishing” appears instead then the message is already flagged as phishing.)

This reports the phishing attack to Google and improves the identification and blocking of future phishing attacks. After you report it, please delete the message.

NOTE: this option is only available in the web (Gmail) interface for Denison Apps. It is not available if you are using Thunderbird, Apple Mail, or another client to access your Denison Apps email.

Please DO NOT RESPOND to or click links in this or any emails that request computer account or other personal information. They are an attempt to steal, at minimum, your email or other computer account, at maximum, your identity.

If you replied to it in any fashion, please visit the ITS Help Desk Online FAQ about what to do if you suspect your account may be compromised and follow all the steps listed:

http://apps.denison.edu/helpdesk/faq3422

Please contact the ITS Help Desk at helpdesk@denison.edu or 740-587-6395 if you have any questions or concerns.