Main menu (IT)

Week 3: Recognize & Report Phishing

Phishing continues to evolve, targeting unsuspecting individuals, and the academic community is no exception. Students, faculty, and staff of CSUN must be vigilant against such deceptive tactics, ranging from fake job postings for students to misleading payroll emails for faculty and staff.

Recognizing Phishing Attempts:

  • Targeted Lures: Understand the common traps:

    • For Students: Fake job postings or opportunities promising high pay for minimal effort can be enticing but are often fraudulent.

    • For Faculty & Staff: Emails appearing to discuss payroll, benefits, or urgent financial matters that you weren't expecting should raise red flags.

  • Unsolicited Messages: Any unexpected message, especially ones urging immediate actions like "Verify Your Account Now" or "Immediate Payment Required", should be treated with suspicion.

  • Spelling and Grammar: While professional scammers are becoming better at crafting convincing messages, many phishing emails still contain spelling, grammar, or syntax errors.

  • Mismatched URLs: Before clicking any links, hover over them. Be wary if the link address looks odd or doesn't match the supposed sender's website.

Too Good To Be True: Remember the age-old adage – if it seems too good to be true, it probably is. Extreme promises or alarming threats are tactics to make you act without thinking.

The Role of Reporting:

  • Stops Further Attempts: Every reported phishing attempt can help IT professionals block malicious domains or addresses, preventing further attacks.

  • Protects the CSUN Community: Your report isn't just about you. By alerting the necessary teams, you safeguard peers, colleagues, and students who might be the next target.

  • Strengthens Our Defense: The more instances of phishing attempts we're aware of, the better we can educate and prepare our community against them.

What To Do If You're Unsure:

  • Verify Directly: If you receive an email claiming to be from a CSUN department or service but are unsure of its legitimacy, reach out directly to that department through official channels.

  • Stay Updated: Regularly check in with CSUN's IT/security department updates. They might provide information about known phishing campaigns or other security threats.

  • Educate Yourself: Stay current by following the leading cybersecurity organizations such as CISA and NIST.

Remember, the digital realm is filled with both opportunities and threats. By staying informed and cautious, we can ensure that our CSUN community remains a safe and vibrant space for all its members.

Additional Resources:

Return to October 2023 - National Cybersecurity Awareness Month page.