Security Advisory: Extortion Phishing Emails
TIME OF OCCURRENCE:
Thursday April 23, 2020
There have been reports of a phishing message that has been circulating at Acadia and externally. The email is an extortion attempt which includes a previously used password and threatens that potentially embarrassing information will be disclosed if the fee is not paid, in a certain amount of time. The tone and content of the email is frightening, but the threat is not credible. The senders of the phishing message retrieved the disclosed password from data mining past breaches with other accounts such as Facebook, Twitter, LinkedIn and Adobe.
If you would like to investigate further, TS recommends that you go https://haveibeenpwned.com/ and submit your email address(es). This may shed some light on the source of the breach. The following HUB article provides more information on Have I Been Pwned and email breaches at: https://hub.acadiau.ca/TDClient/KB/ArticleDet?ID=934&SIDs=19.
Steps you can take to protect yourself:
- Practice Safe Password Hygiene:
- Use strong passwords
- Use the mantra - Unique Account; Unique Password
- Use a password manager. See the following HUB article for information on the best Password Manager for you: https://hub.acadiau.ca/TDClient/KB/ArticleDet?ID=864
- Use separate emails and accounts for your home and work life.
- Check if your Acadia University account or any other accounts to see if involved in a breach by going to https://haveibeenpwned.com/
- Use the Phish Alert Button (or forward to firstname.lastname@example.org) to report phishing emails.
- Take the 2020 Cybersecurity Awareness training available to you at KnowBe4.com
If you have received this extortion email and still have concerns, please contact the Service Desk.
All proposed changes are reviewed by a Change Advisory Board and, where possible, scheduled between 5-7:30 am (Atlantic Time). Once approved, they are placed on a Maintenance Calendar.
Using the HUB continues to be the best way to receive support and answers to your questions. Thank you for your patience as our support protocols shift.
Follow our Tuesday Tech Tips - https://hub.acadiau.ca/TDClient/KB/?CategoryID=124
Acadia Technology Services