Michigan State University, along with almost every email provider continues to be a target of malware emails. Malware emails often appear to be package/parcel delivery notices, invoices, fax/scans, or fake court notices.
Criminals are constantly coming up with new ways to compromise computers, steal passwords, trick people into reviewing valuable information, or scam you out of money. It is very difficult to know if someone on the internet is telling the truth. Scams and phishing attempts can lead to identity theft, compromising your online accounts or enabling access to your personal information.
All passwords should have three of the four following requirements:
Everyone should practice safe password practices. If you write down passwords, DO NOT LEAVE the password in plain sight. Also do not reuse passwords, or use easily guessed passwords such as "password," part of your name, or NetID. Try to avoid using adjacent keys on the keyboard as a password.
Social Engineering is an attack vector that relies on your interaction and often involves tricking you into breaking security procedures. Cyber attackers discovered that the easiest way to get your information is to simply ask for it. Common sense is the best defense against a social engineering attack. If the message seems odd, suspicious, or even too good to be true, then it is probably a social engineering attack. Examples of social engineering include:
Phishing is defined as "the activity of defrauding an online account holder of financial information by posing as a legitimate company." It attempts to steal your credentials through emails or sending you to fake websites where they'll trick you into providing your credentials. It is also possible for a phishing attempt to lead to your identity being stolen.
