Category Archives: Security

5/1 Job$ Opp phishing

Phish of the Day is for babysitting and tutoring (below). The email comes from a compromised Wellesley email account, but when you reply, it’s sent to an @gmail.com account.   You can ensure the email address you’re replying to is the … Continue reading

Posted in Security | Comments Off on 5/1 Job$ Opp phishing

4/28 Gmail POP/IMAP available

While POP/IMAP is available, we will work with people who use these options to move to other tools. We are likely to turn off POP/IMAP in the future, to eliminate abuse by hackers. 4/27 2pm Due to some new, nasty phishing, we’re … Continue reading

Posted in Google, Security, Uncategorized | Comments Off on 4/28 Gmail POP/IMAP available

Phishing work offers too good to be true

A current phishing example offers $200 to usher an event at Collins. The email comes from a compromised Wellesley email accounts, but when you reply it is sent to an @gmail.com account. You can ensure the email address you’re replying to is … Continue reading

Posted in Security | Comments Off on Phishing work offers too good to be true

4/20 Clever phishing — update Chrome

In a previous service alert, we let you know about a particularly nasty phishing attack that masks URLs to make them look harmless. The alert links to a fix for Firefox, and there’s now a fix for Chrome — update … Continue reading

Posted in Security | Comments Off on 4/20 Clever phishing — update Chrome

4/18 Very clever new phishing

Have a cup of coffee before trying to digest this one…(sigh). There’s a new and particularly nasty type of phishing that uses a fake URL using unicode that looks identical to a safe URL. A full explanation is here: http://bit.ly/2pOsGNX It affects the … Continue reading

Posted in Security | Comments Off on 4/18 Very clever new phishing

2/27 Cloudbleed: Private info breach through Cloudflare

Summarized from CNET. com: Cloudbleed is the latest internet bug that puts users private information in jeopardy, through a breach of the internet company Cloudflare. Cloudflare securely moves information entered by users of ~3,400 “https” websites to the sites’ servers. … Continue reading

Posted in Security | Comments Off on 2/27 Cloudbleed: Private info breach through Cloudflare

2/22 “Missing font” malware

A highly sophisticated scam targeting Google Chrome users is circulating: a pop-up prompts you to download a “missing font” file, but the file is actually malware. The style of the message makes it look completely legitimate. How can you tell … Continue reading

Posted in Security | Comments Off on 2/22 “Missing font” malware

2/21 11:15am Latest phishing scams

Beware of a couple phishing scams circulating from “Wellesley IT Admin” or “IT Notification.”  Remember LTS will never ask for your password and will always sign messages with a name of a staff member so you can followup with us. If … Continue reading

Posted in Email, Security | Comments Off on 2/21 11:15am Latest phishing scams

2/18 4:15pm Important! Dropbox phishing scam

Please delete or mark this message as spam/phishing. Subject: You have received (1) new document via dropbox Message says someone sent you a file via Dropbox.  Sign in with your email to view, followed by a malicious link.  Do not click … Continue reading

Posted in Email, Security | Comments Off on 2/18 4:15pm Important! Dropbox phishing scam

Phishing reminders

If you give your login information through a phishing attempt, contact the Help Desk immediately. They will help you log any phishers out of your account and reset your password (you should do this right away). Phishing is getting more sophisticated, … Continue reading

Posted in Security | Comments Off on Phishing reminders