How to connect to our systems while away from the office, communicate with coworkers and students, tips for computing safely and other information can be found on our Working Remote page.
We will be looking at a phishing attempt that hit EIU this week.
In this case someone from outside EIU was pretending to be from EIU and the attacker attempted to get you to give up your credentials.
Were there any clues that this was a phishing email?
Questions to ask:
- Was I expecting this email?
- Does the link match the company who it is for?
- Does it ask me to do something out of the ordinary?
- Why does it say [SPAM]
- The link forwards to a non-eiu page but looks like EIU.
- Is there an EIU verification link?
Reviewing the email
Notice [SPAM] has been added to the subject line. Office 365 is noticing something is not right with this message.
Look at the from address, it shows email@example.com, this is not Eastern Illinois University (firstname.lastname@example.org).
Improper grammar: There is no punctuation within the email, every letter is capitalized and the email ends with a pipe symbol.
Why is “EIU” linked to a stanford.edu address, without explaining it?
In this email there is a link. If you put your cursor over the link on the bottom left of your browser, it will show where the link will take you. You can see that the page shows sanookpark.com.com not standford.edu.
There is no EIU email verification link at the bottom, you can always check, https://www.eiu.edu/verify for official emails.
*Tip: If you have the option, go the website directly, do not click links within email.
Sadly, this website does a good job of mimicking our EIU page. There are some clues if we look for them. In the address bar of the browser, eiu.edu is not listed, it shows sanookpark.com. Never put your username and password in when the URL is not eiu.edu and does not start with https://.
The red flags are add up. At this point, I may call payroll directly. Another option is to forward the email to the EIU phishing group at email@example.com. ITS will review the email and let me know if it is OK.
ITS has implementing a new procedure for how users are able to requests their E-Number. If a user requests their E-Number they will be required to answer a series of questions to verify their identity. After answering the appropriate questions correctly, the user will be provided their E-Number.
EIU has just implemented a new notification system called Alert EIU. As part of the implementation we have imported all faculty, staff and student email accounts into the system. This system does offer the functionality to send notifications to a personal email account as well as text up to two cell phone numbers.
The ITS Help Desk has, over the summer, moved to room 3040 in the Student Services Building. They were previously located in the basement of the Student Services Building. This move will facilitate in providing a one stop location for students, faculty, and staff to receive assistance with their technology and PantherCard needs.
With the rigorous change in technology, obtaining knowledge in the most efficient way possible is essential to the learning process. Traditionally, learning has always taken place within classrooms and labs; then again, through the integration of online learning platforms, there has been a major revolution in the way the common student is learning today. From online learning platforms, the student is given the ability to still participate, all from the comfort of home.
For Christine Stricker, CATS’s instructional design specialist for online learning, utilizing Blackboard Collaborative, an online virtual classroom, has provided the Center for Online Learning the ability to reach EIU’s faculty from distances near and far; furthermore, Blackboard Collaborative incorporates the ability to communicate via video stream between both the students and instructors of the classroom.