Phishing
Phishing is the attempt to acquire sensitive information such as usernames, passwords, and credit card details (and sometimes, indirectly, money), often for malicious reasons, by masquerading as a trustworthy entity in an electronic communication.
In the past couple of years, phishing attacks have become increasingly sophisticated and credible. Here are some important things to remember when handling your email:
- Never provide any personal information (social security numbers, date of birth, account information) in an email, phone, text or on social media sites.
- Don’t click on links or open file attachments from people you don’t know. When in doubt, either delete it or contact the ITS Department for advice. Don’t click on any links if you don’t recognize the sender or are not expecting the email,
- If you fell victim to a phish, - (clicking on the links and/or sharing personal information), your account may have been compromised. You should change your password right away. The ITS Department software may even recognize unauthorized/suspicious activity and lock your account until the ITS Department can check your college owned computer, remove any malware and possibly reset settings on the device. You will be advised to change your password immediately.
- To report Phishing in Gmail click the three vertical dots on the right side of the email. Then click "Report Phishing" Google will ensure that you will no longer receive emails from this email address as well as protect you from future Phishing attempts.
To report a Phishing scam from your @sunyorange email address: forward the email to
it-security@sunyorange.edu
For more help and information if you fell victim to a Phishing scam please see the link below from the FTC:
https://consumer.ftc.gov/articles/how-recognize-and-avoid-phishing-scams