<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p class="x_MsoNormal"><span style="font-size: 11pt;">The past few
days, we have seen another round of phishing emails targeting
OSU, claiming to be from department chairs. These typically use
the chair's real name but a fake email address.<br>
</span></p>
<p class="x_MsoNormal"><span style="font-size: 11pt;">First, don’t
panic! However, if you’ve given up your password, credit card,
SSN or purchased items contact ASCTech immediately and see
below. Scams are very common and the best move is to be vigilant
not to fall for them.</span></p>
<p class="x_MsoNormal"><span style="font-size:11.0pt;
font-family:"Calibri",sans-serif; color:#1F497D"> </span></p>
<p class="x_MsoNormal"><span style="font-size: 11pt;">My
recommendations:</span></p>
<ul style="margin-bottom: 0px; margin-top: 0px;">
<li><span style="font-size:11.0pt; font-family:Symbol;
color:#1F497D"><span style="">·<span style="font:7.0pt
"Times New Roman"">
</span></span></span><span style="font-size: 11pt;">Do NOT
respond to any OSU business from a non-osu.edu (faculty/staff)
or BuckeyeMail email (students).</span></li>
<li><span style="font-size:11.0pt; font-family:Symbol;
color:#1F497D"><span style="">·<span style="font:7.0pt
"Times New Roman"">
</span></span></span><span style="font-size: 11pt;">Faculty/staff
will never ask you to get items such as gift cards or transfer
money for them.</span></li>
<li><span style="font-size:11.0pt; font-family:Symbol;
color:#1F497D"><span style="">·<span style="font:7.0pt
"Times New Roman"">
</span></span></span><span style="font-size: 11pt;">Use the
“Report Phish” button if you have it in Microsoft Outlook.
(This gives OCIO Security complete headers.)</span></li>
</ul>
<p class="x_MsoListParagraph" style="text-indent:-.25in"><span
style="font-size:11.0pt;
font-family:"Calibri",sans-serif; color:#1F497D"></span></p>
<ul style="margin-bottom: 0px; margin-top: 0px;">
<ul>
<li><span style="font-size: 11pt; color: rgb(31, 73, 125);"><font
color="#000000">If you don’t have the button you can
forward to
</font><a href="mailto:report-phish@osu.edu">report-phish@osu.edu</a></span></li>
<li><span style="color: rgb(31, 73, 125); font-size: 14.6667px;"><font
color="#000000">If you use Outlook the button
install should be in Self Service (Mac) or Software Center
(Windows)</font></span>
<p><span style="color: rgb(31, 73, 125); font-family: Calibri,
sans-serif; font-size: 14.6667px;">
</span></p>
</li>
</ul>
<li><span style="font-size: 11pt; color: rgb(31, 73, 125);"><font
color="#000000">Look for common signs of phishing:</font>
<a
href="https://www.sans.org/security-awareness-training/resources/posters/dont-get-hooked">https://www.sans.org/security-awareness-training/resources/posters/dont-get-hooked</a></span></li>
<li><span style="font-size: 11pt; color: rgb(31, 73, 125);"><font
color="#000000">If you respond / click on links / give up
your password contact ASCTech support immediately:
</font><a href="mailto:asctech@osu.edu">asctech@osu.edu</a> .</span></li>
<ul>
<li><span style="font-size: 11pt; color: rgb(31, 73, 125);"><font
color="#000000">If you do give up your password change it
immediately at</font>
<a href="https://my.osu.edu">https://my.osu.edu</a></span></li>
<li><span style="font-size: 11pt;">If you give up information
such as credit card number, address, phone, SSN we will get
you in contact with our Security team.</span></li>
<li><span style="font-size: 11pt;">With SSN, name, and address
that’s enough to start credit applications.</span></li>
<li><span style="font-size: 11pt;">You may see fraudulent
charges on a given up credit card – sometimes within minutes
– call your bank.</span></li>
<li><span style="font-size: 11pt;">If you divulge your phone
number be extra suspicious, as you may get extra scam calls.</span></li>
<ul>
<li><span style="font-size: 11pt;">(Though honestly with the
amount of phone scams you might not be able to notice an
increase.)
</span></li>
</ul>
</ul>
<li><span style="font-size: 11pt;">Do not allow anyone access to
your computer remotely (this is common with people claiming to
be from Microsoft or Apple tech support). </span></li>
<ul>
<li><span style="font-size: 11pt;">That’s normally a phone call
not phishing, but it happens enough to mention it here.</span></li>
<li><span style="font-size: 11pt;">ASC does sometimes use a tool
for this (Bomgar) but we will be responding to a specific
ticket and identify ourselves - and you have to allow
access. If you have doubts you can call your local support
person.</span></li>
</ul>
</ul>
<p class="x_MsoListParagraph" style="margin-left:1.0in;
text-indent:-.25in"><span style="font-size:11.0pt;
font-family:"Calibri",sans-serif; color:#1F497D"></span></p>
<p class="x_MsoNormal"><span style="font-size:11.0pt;
font-family:"Calibri",sans-serif; color:#1F497D"><br>
</span></p>
<div class="moz-signature">-- <br>
<div class="email_signature" style="background:#ffffff;">
<p style="font-family:Arial, sans-serif; color:#333333;
font-size:12px; line-height:18px; background:#ffffff;"> <span
style="font-family:Arial, sans-serif; font-size:12px;
line-height:18px; background:#ffffff; color:#bb0000;
font-weight:bold;">Bryan Dunlap</span><br>
<em>Computer Manager / Unix Systems Administrator</em><br>
<strong>The Ohio State University </strong> <span
style="font-family:Arial, sans-serif; font-size:12px;
line-height:18px; background:#ffffff; color:#bb0000;">College
of the Arts & Sciences</span> Department of Physics<br>
1199 Physics Research Building, 191 W. Woodruff Ave.,
Columbus, OH 43210 <br>
Phone: <em>614/292-4269</em> Email: <a
href="mailto:dunlap.3@osu.edu" style="font-family:Arial,
sans-serif; font-size:12px; line-height:18px;
background:#ffffff; margin-right:10px;">dunlap.3@osu.edu</a><br>
<a href="https://physics.osu.edu" style="font-family:Arial,
sans-serif; font-size:12px; line-height:18px;
background:#ffffff;">https://physics.osu.edu</a> <a
href="https://asctech.osu.edu" style="font-family:Arial,
sans-serif; font-size:12px; line-height:18px;
background:#ffffff;">https://asctech.osu.edu</a> </p>
</div>
</div>
</body>
</html>