RIT is seeing a recent increase in phishing attempts to gain access to myInfo/eBiz. Since last week, many attempts to gain access to myInfo/eBiz have been made. RIT employees (including student employees) who have not yet signed up for Multi-factor Authentication at RIT (MFA) are at risk, because the hackers are able to enroll usernames in MFA and gain access to protected accounts and information. We suspect that Friday’s phishing attempt was used to collect usernames and passwords.

What can I do to protect myself?

• Sign up for MFA today by visiting the ITS MFA page and following the prompts! That’s the
... ...

We’ve received a spear phishing attempt (a phish targeted at a specific population) claiming that there is a security emergency on campus. The email asks the reader to access a linked REPORT and follow protocol. If you encounter this phish, please just delete it.

Here’s the text from the phishing attempt:

--------------------------------

From: "Cullis, Barbara" <EMAIL ADDRESS>
Date: January 12, 2018 at 3:33:00 PM EST
To: Undisclosed recipients:;
Subject: Important Security Notification

Hello All,

There is a security emergency in Campus. Please go through REPORT released for update

and follow protocol.

---------------------------

What can I do to protect myself?

• Be vigilant! Never respond to an email request for your username
... ...

RIT Information Security Advisory—Ransomware on Campus

Last month, an RIT computer in one of the colleges was compromised by ransomware, leading to attempted encryption of files both on the computer and on network shares to which the computer was connected. Thanks to the diligence of support staff, the attack was detected and halted. Because the data was backed up, no information was lost in the attack.

The vector for this particular attack appears to be a malicious attachment received by email. The attachment was disguised as a mailing label.

Here's a copy of the email. Note that the sender email... ...

RIT Information Security Alert--Account Update Spear Phishing Attacks

Why am I receiving this message?

RIT users have received account update phishing attempts masquerading as official RIT email.

If you've received messages with the Subject Line: RE: Outlook Account Update or Account Update, please delete them. The messages read as follows, 

RIT Information Security Alert: Important Message Phish

RIT email users have received another phishing attack that mimics an RIT official message. PLEASE DON'T CLICK ON THE LINK AND PROVIDE YOUR INFO! You'll receive many of these phishing attempts throughout the academic year. We won't be able to warn you about all of them.

If you've received a message with the Subject Line: RIT: Important Message, do not click on the link. Here's the text of the message:

How do you know this is a phishing attack?

• RIT does not send out emails with links to
... ...