{"id":433,"date":"2021-09-27T17:08:54","date_gmt":"2021-09-27T21:08:54","guid":{"rendered":"https:\/\/dev.is.wfu.edu\/infosec\/?page_id=433"},"modified":"2022-04-04T15:26:44","modified_gmt":"2022-04-04T19:26:44","slug":"phishing","status":"publish","type":"page","link":"https:\/\/dev.is.wfu.edu\/infosec\/phishing\/","title":{"rendered":"Phishing"},"content":{"rendered":"\n<p>Phishing scams are emails or other messages that appear to come from a known sender, but are actually sent by hackers or other dangerous entities. Phishing emails often ask a user to click on a fraudulent link, or request personal information such as a password or banking information.<\/p>\n\n\n\n<p>Phishing scams are increasingly prevalent. Although a number of emails are flagged for phishing by Google, some suspicious messages have the potential to circumvent filters. We have created this page to share with you some of the recent phishing scams currently in circulation.&nbsp;<\/p>\n\n\n<div class=\"gb-container gb-container-dbdab719\"><div class=\"gb-inside-container\">\n\n<h2 class=\"wp-block-heading\" id=\"recent-phishing-scams\">Recent Phishing Scams<\/h2>\n\n\n<div class=\"ptam-block-post-grid aligncenter\"><div class=\"ptam-post-grid-items is-grid columns-3\"><article class=\"has-thumb\" style=\"border: 1px solid #E5E0D9;  background: #f7f7f7; padding: 18px; border-radius: 3px;\"><div class=\"ptam-block-post-grid-image\" style='text-align: center'><a href=\"https:\/\/dev.is.wfu.edu\/infosec\/phone-scam-claiming-to-be-nc-police%ef%bf%bc\/\" rel=\"bookmark\"><img loading=\"lazy\" width=\"150\" height=\"150\" src=\"https:\/\/dev.is.wfu.edu\/app\/uploads\/sites\/13\/2022\/04\/phone-scam-150x150.png\" class=\"attachment-thumbnail size-thumbnail\" alt=\"red &quot;no&quot; sign over Phone Scams language\" decoding=\"async\" srcset=\"https:\/\/dev.is.wfu.edu\/app\/uploads\/sites\/13\/2022\/04\/phone-scam-150x150.png 150w, https:\/\/dev.is.wfu.edu\/app\/uploads\/sites\/13\/2022\/04\/phone-scam.png 225w\" sizes=\"(max-width: 150px) 100vw, 150px\" \/><\/a><\/div><div class=\"ptam-block-post-grid-text\"><h3 class=\"ptam-block-post-grid-title\" style='text-align: left'><a href=\"https:\/\/dev.is.wfu.edu\/infosec\/phone-scam-claiming-to-be-nc-police%ef%bf%bc\/\" rel=\"bookmark\" style=\"color: inherit; font-family: inherit; box-shadow: unset;\">Phone Scam Claiming to be NC Police<\/a><\/h3><div class=\"ptam-block-post-grid-byline ptam-text-lower-case\" style='text-align: left; color: inherit; font-family: inherit'><time datetime=\"2022-04-28T15:18:52-04:00\" class=\"ptam-block-post-grid-date\">April 28, 2022<\/time><\/div><p class=\"ptam-block-post-grid-excerpt\" style='text-align: left; color: inherit; font-family: inherit'>There have been a handful of instances where members from our Wake Forest community have been contacted by someone claiming to be from a North Carolina Sheriff&#8217;s office. These bad actors have, in some cases, cited individual\u2019s correct addresses, and listed a number of offenses with fraudulent citation numbers trying to collect fines. Protect yourself&hellip;<p class=\"ptam-block-post-grid-link-wrapper\"><a class=\"ptam-block-post-grid-link ptam-text-link\" href=\"https:\/\/dev.is.wfu.edu\/infosec\/phone-scam-claiming-to-be-nc-police%ef%bf%bc\/\" rel=\"bookmark\" style=\"color: inherit; font-family: inherit\">Continue Reading<\/a><\/p><\/p><\/div><\/article>\n<article class=\"has-thumb\" style=\"border: 1px solid #E5E0D9;  background: #f7f7f7; padding: 18px; border-radius: 3px;\"><div class=\"ptam-block-post-grid-image\" style='text-align: center'><a href=\"https:\/\/dev.is.wfu.edu\/infosec\/unwarranted-multi-factor-authentication-scams\/\" rel=\"bookmark\"><img loading=\"lazy\" width=\"150\" height=\"69\" src=\"https:\/\/dev.is.wfu.edu\/app\/uploads\/sites\/13\/2022\/04\/phish-hook-2-150x69.jpeg\" class=\"attachment-thumbnail size-thumbnail\" alt=\"hook capturing paper of username and password\" decoding=\"async\" srcset=\"https:\/\/dev.is.wfu.edu\/app\/uploads\/sites\/13\/2022\/04\/phish-hook-2-150x69.jpeg 150w, https:\/\/dev.is.wfu.edu\/app\/uploads\/sites\/13\/2022\/04\/phish-hook-2-300x137.jpeg 300w, https:\/\/dev.is.wfu.edu\/app\/uploads\/sites\/13\/2022\/04\/phish-hook-2.jpeg 332w\" sizes=\"(max-width: 150px) 100vw, 150px\" \/><\/a><\/div><div class=\"ptam-block-post-grid-text\"><h3 class=\"ptam-block-post-grid-title\" style='text-align: left'><a href=\"https:\/\/dev.is.wfu.edu\/infosec\/unwarranted-multi-factor-authentication-scams\/\" rel=\"bookmark\" style=\"color: inherit; font-family: inherit; box-shadow: unset;\">Unwarranted multi-factor authentication scams<\/a><\/h3><div class=\"ptam-block-post-grid-byline ptam-text-lower-case\" style='text-align: left; color: inherit; font-family: inherit'><time datetime=\"2022-04-04T14:32:09-04:00\" class=\"ptam-block-post-grid-date\">April 4, 2022<\/time><\/div><p class=\"ptam-block-post-grid-excerpt\" style='text-align: left; color: inherit; font-family: inherit'>Beware of phishing attempts via unwarranted multi-factor authentication (MFA or two-step verification) prompts (known as prompt-bombing). Recent observations indicate that phishers may retrieve a valid username\/password combination and enter this valid information into an authentication point. The legitimate user receives the MFA prompt via SMS or an authentication app to confirm their login. If the&hellip;<p class=\"ptam-block-post-grid-link-wrapper\"><a class=\"ptam-block-post-grid-link ptam-text-link\" href=\"https:\/\/dev.is.wfu.edu\/infosec\/unwarranted-multi-factor-authentication-scams\/\" rel=\"bookmark\" style=\"color: inherit; font-family: inherit\">Continue Reading<\/a><\/p><\/p><\/div><\/article>\n<article class=\"has-thumb\" style=\"border: 1px solid #E5E0D9;  background: #f7f7f7; padding: 18px; border-radius: 3px;\"><div class=\"ptam-block-post-grid-image\" style='text-align: center'><a href=\"https:\/\/dev.is.wfu.edu\/infosec\/recent-phishing-scam-imitating-wfu-payroll\/\" rel=\"bookmark\"><img loading=\"lazy\" width=\"150\" height=\"80\" src=\"https:\/\/dev.is.wfu.edu\/app\/uploads\/sites\/13\/2022\/03\/Example-Phish-150x80.png\" class=\"attachment-thumbnail size-thumbnail\" alt=\"screenshot of phishing email reading &quot;Hello NAME, Kindly review Wake Forest University statement&quot; with &quot;Review Payroll&quot; button.\" decoding=\"async\" srcset=\"https:\/\/dev.is.wfu.edu\/app\/uploads\/sites\/13\/2022\/03\/Example-Phish-150x80.png 150w, https:\/\/dev.is.wfu.edu\/app\/uploads\/sites\/13\/2022\/03\/Example-Phish-300x159.png 300w, https:\/\/dev.is.wfu.edu\/app\/uploads\/sites\/13\/2022\/03\/Example-Phish.png 640w\" sizes=\"(max-width: 150px) 100vw, 150px\" \/><\/a><\/div><div class=\"ptam-block-post-grid-text\"><h3 class=\"ptam-block-post-grid-title\" style='text-align: left'><a href=\"https:\/\/dev.is.wfu.edu\/infosec\/recent-phishing-scam-imitating-wfu-payroll\/\" rel=\"bookmark\" style=\"color: inherit; font-family: inherit; box-shadow: unset;\">Recent Phishing Scam Imitating WFU Payroll<\/a><\/h3><div class=\"ptam-block-post-grid-byline ptam-text-lower-case\" style='text-align: left; color: inherit; font-family: inherit'><time datetime=\"2022-03-15T13:59:43-04:00\" class=\"ptam-block-post-grid-date\">March 15, 2022<\/time><\/div><p class=\"ptam-block-post-grid-excerpt\" style='text-align: left; color: inherit; font-family: inherit'>Beware of phishing notifications presumably coming from WFU payroll. Be sure to scrutinize message content, as well as the source, before responding to the sender or interacting with embedded links and\/or attachments. This particular phishing scheme prompts users, who click the \u201cReview Payroll\u201d button, to download a malicious software package.<p class=\"ptam-block-post-grid-link-wrapper\"><a class=\"ptam-block-post-grid-link ptam-text-link\" href=\"https:\/\/dev.is.wfu.edu\/infosec\/recent-phishing-scam-imitating-wfu-payroll\/\" rel=\"bookmark\" style=\"color: inherit; font-family: inherit\">Continue Reading<\/a><\/p><\/p><\/div><\/article>\n<article class=\"has-thumb\" style=\"border: 1px solid #E5E0D9;  background: #f7f7f7; padding: 18px; border-radius: 3px;\"><div class=\"ptam-block-post-grid-image\" style='text-align: center'><a href=\"https:\/\/dev.is.wfu.edu\/infosec\/recent-phishing-scams-imitating-financial-institutions\/\" rel=\"bookmark\"><img loading=\"lazy\" width=\"150\" height=\"94\" src=\"https:\/\/dev.is.wfu.edu\/app\/uploads\/sites\/13\/2022\/02\/smishing-150x94.png\" class=\"attachment-thumbnail size-thumbnail\" alt=\"hand holding a phone with a crossbones image indicating smishing\" decoding=\"async\" srcset=\"https:\/\/dev.is.wfu.edu\/app\/uploads\/sites\/13\/2022\/02\/smishing-150x94.png 150w, https:\/\/dev.is.wfu.edu\/app\/uploads\/sites\/13\/2022\/02\/smishing-300x189.png 300w, https:\/\/dev.is.wfu.edu\/app\/uploads\/sites\/13\/2022\/02\/smishing-768x483.png 768w, https:\/\/dev.is.wfu.edu\/app\/uploads\/sites\/13\/2022\/02\/smishing.png 800w\" sizes=\"(max-width: 150px) 100vw, 150px\" \/><\/a><\/div><div class=\"ptam-block-post-grid-text\"><h3 class=\"ptam-block-post-grid-title\" style='text-align: left'><a href=\"https:\/\/dev.is.wfu.edu\/infosec\/recent-phishing-scams-imitating-financial-institutions\/\" rel=\"bookmark\" style=\"color: inherit; font-family: inherit; box-shadow: unset;\">Recent phishing scams imitating financial institutions<\/a><\/h3><div class=\"ptam-block-post-grid-byline ptam-text-lower-case\" style='text-align: left; color: inherit; font-family: inherit'><time datetime=\"2022-02-21T16:10:44-05:00\" class=\"ptam-block-post-grid-date\">February 21, 2022<\/time><\/div><p class=\"ptam-block-post-grid-excerpt\" style='text-align: left; color: inherit; font-family: inherit'>Presently, there is a text phishing \u201csmishing\u201d campaign imitating financial institutions with alarming messages regarding account security issues. Be sure to scrutinize message content when opening texts, as well as the source before responding to the sender or interacting with embedded links and\/or attachments. Following is an example of a recent fraudulent text message. It&hellip;<p class=\"ptam-block-post-grid-link-wrapper\"><a class=\"ptam-block-post-grid-link ptam-text-link\" href=\"https:\/\/dev.is.wfu.edu\/infosec\/recent-phishing-scams-imitating-financial-institutions\/\" rel=\"bookmark\" style=\"color: inherit; font-family: inherit\">Continue Reading<\/a><\/p><\/p><\/div><\/article>\n<article class=\"has-thumb\" style=\"border: 1px solid #E5E0D9;  background: #f7f7f7; padding: 18px; border-radius: 3px;\"><div class=\"ptam-block-post-grid-image\" style='text-align: center'><a href=\"https:\/\/dev.is.wfu.edu\/infosec\/phishing-for-your-credentials\/\" rel=\"bookmark\"><img loading=\"lazy\" width=\"150\" height=\"84\" src=\"https:\/\/dev.is.wfu.edu\/app\/uploads\/sites\/13\/2022\/02\/shutterstock_749866270-900x506-1-150x84.jpg\" class=\"attachment-thumbnail size-thumbnail\" alt=\"image of a cyber criminal with a fishing pool attempting to catch a file of personal data\" decoding=\"async\" srcset=\"https:\/\/dev.is.wfu.edu\/app\/uploads\/sites\/13\/2022\/02\/shutterstock_749866270-900x506-1-150x84.jpg 150w, https:\/\/dev.is.wfu.edu\/app\/uploads\/sites\/13\/2022\/02\/shutterstock_749866270-900x506-1-300x169.jpg 300w, https:\/\/dev.is.wfu.edu\/app\/uploads\/sites\/13\/2022\/02\/shutterstock_749866270-900x506-1-768x432.jpg 768w, https:\/\/dev.is.wfu.edu\/app\/uploads\/sites\/13\/2022\/02\/shutterstock_749866270-900x506-1.jpg 900w\" sizes=\"(max-width: 150px) 100vw, 150px\" \/><\/a><\/div><div class=\"ptam-block-post-grid-text\"><h3 class=\"ptam-block-post-grid-title\" style='text-align: left'><a href=\"https:\/\/dev.is.wfu.edu\/infosec\/phishing-for-your-credentials\/\" rel=\"bookmark\" style=\"color: inherit; font-family: inherit; box-shadow: unset;\">Phishing for your Credentials<\/a><\/h3><div class=\"ptam-block-post-grid-byline ptam-text-lower-case\" style='text-align: left; color: inherit; font-family: inherit'><time datetime=\"2022-02-02T14:11:19-05:00\" class=\"ptam-block-post-grid-date\">February 2, 2022<\/time><\/div><p class=\"ptam-block-post-grid-excerpt\" style='text-align: left; color: inherit; font-family: inherit'>Presently, there are several recurring phishing email campaigns directed at a number of WFU recipients with the purpose of harvesting account information, such as username\/passwords. These phishing attempts are quite sophisticated so we want to raise awareness of what you should be looking for when opening your Inbox. Be sure to scrutinize message content, as&hellip;<p class=\"ptam-block-post-grid-link-wrapper\"><a class=\"ptam-block-post-grid-link ptam-text-link\" href=\"https:\/\/dev.is.wfu.edu\/infosec\/phishing-for-your-credentials\/\" rel=\"bookmark\" style=\"color: inherit; font-family: inherit\">Continue Reading<\/a><\/p><\/p><\/div><\/article>\n<article class=\"has-thumb\" style=\"border: 1px solid #E5E0D9;  background: #f7f7f7; padding: 18px; border-radius: 3px;\"><div class=\"ptam-block-post-grid-image\" style='text-align: center'><a href=\"https:\/\/dev.is.wfu.edu\/infosec\/bank-fraud-sms-phish-followed-by-phone-phish\/\" rel=\"bookmark\"><img loading=\"lazy\" width=\"150\" height=\"82\" src=\"https:\/\/dev.is.wfu.edu\/app\/uploads\/sites\/13\/2021\/11\/Bank-Fraud-Smish-150x82.png\" class=\"attachment-thumbnail size-thumbnail\" alt=\"screenshot of smish &quot;Free Msg-J.P. Morgan Chase Bank Alert - Did you attempt a Zelle payment for the amount of $5000.00? Reply YES or NO Or 1 To Decline Fraud Alerts&quot;\" decoding=\"async\" srcset=\"https:\/\/dev.is.wfu.edu\/app\/uploads\/sites\/13\/2021\/11\/Bank-Fraud-Smish-150x82.png 150w, https:\/\/dev.is.wfu.edu\/app\/uploads\/sites\/13\/2021\/11\/Bank-Fraud-Smish-300x163.png 300w, https:\/\/dev.is.wfu.edu\/app\/uploads\/sites\/13\/2021\/11\/Bank-Fraud-Smish-1024x557.png 1024w, https:\/\/dev.is.wfu.edu\/app\/uploads\/sites\/13\/2021\/11\/Bank-Fraud-Smish-768x418.png 768w, https:\/\/dev.is.wfu.edu\/app\/uploads\/sites\/13\/2021\/11\/Bank-Fraud-Smish.png 1244w\" sizes=\"(max-width: 150px) 100vw, 150px\" \/><\/a><\/div><div class=\"ptam-block-post-grid-text\"><h3 class=\"ptam-block-post-grid-title\" style='text-align: left'><a href=\"https:\/\/dev.is.wfu.edu\/infosec\/bank-fraud-sms-phish-followed-by-phone-phish\/\" rel=\"bookmark\" style=\"color: inherit; font-family: inherit; box-shadow: unset;\">Bank Fraud SMS Phish Followed by Phone Phish<\/a><\/h3><div class=\"ptam-block-post-grid-byline ptam-text-lower-case\" style='text-align: left; color: inherit; font-family: inherit'><time datetime=\"2021-11-11T12:40:28-05:00\" class=\"ptam-block-post-grid-date\">November 11, 2021<\/time><\/div><p class=\"ptam-block-post-grid-excerpt\" style='text-align: left; color: inherit; font-family: inherit'>Be alert for fraudulent SMS messages asking users to confirm a payment, followed up by a phone call from the hackers mimicking the fraud department of that bank. When in doubt, hang up, look up the number of the organization supposedly calling you, and call back.<p class=\"ptam-block-post-grid-link-wrapper\"><a class=\"ptam-block-post-grid-link ptam-text-link\" href=\"https:\/\/dev.is.wfu.edu\/infosec\/bank-fraud-sms-phish-followed-by-phone-phish\/\" rel=\"bookmark\" style=\"color: inherit; font-family: inherit\">Continue Reading<\/a><\/p><\/p><\/div><\/article>\n<\/div><div class=\"ptam-pagination\"><\/div><\/div>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button aligncenter\"><a class=\"wp-block-button__link\" href=\"https:\/\/dev.is.wfu.edu\/infosec\/category\/phishing\/\">View All Phishing Scams<\/a><\/div>\n<\/div>\n\n\n<div class=\"gb-grid-wrapper gb-grid-wrapper-00787e5f\">\n<div class=\"gb-grid-column gb-grid-column-689d3368\"><div class=\"gb-container gb-container-689d3368\"><div class=\"gb-inside-container\">\n\n<h2 class=\"wp-block-heading\" id=\"do-not-become-a-phishing-victim\"><strong>Do not become a phishing victim:&nbsp;<\/strong><\/h2>\n\n\n\n<ul class=\"has-regular-font-size\"><li>Never provide your personal information in response to urgent emails, text messages or phone calls that instruct you to click a link to confirm your payment or enter more information&nbsp;<\/li><li>View your Wake Forest email in the Gmail web interface or Gmail app on your mobile device to leverage warning banners across suspicious messages.&nbsp;<\/li><\/ul>\n\n<\/div><\/div><\/div>\n\n<div class=\"gb-grid-column gb-grid-column-31572cc9\"><div class=\"gb-container gb-container-31572cc9\"><div class=\"gb-inside-container\">\n\n<h2 class=\"wp-block-heading\" id=\"learn-more\"><strong>Learn more!<\/strong><\/h2>\n\n\n\n<ul><li>Register for a <a href=\"https:\/\/pdc.wfu.edu\/events\/2999\/\">Computer and Information Security Essentials Class<\/a><\/li><li>Faculty and Staff &#8211; Learn more about <a href=\"https:\/\/dev.is.wfu.edu\/services\/knowbe4\/\">KnowBe4, our cybersecurity and phishing training platform<\/a><\/li><li>Students &#8211; Take the&nbsp;<strong><a href=\"https:\/\/dev.is.wfu.edu\/cybersecurity-month-2021#password\">KnowBe4 Home Course<\/a>&nbsp;<\/strong>and learn how to make wise decisions when it comes to Internet usage<\/li><li>Visit <a href=\"https:\/\/dev.is.wfu.edu\/services\/virus-spyware\/\">Virus and Malware Removal Tools and Tips | AskDeac<\/a><\/li><\/ul>\n\n<\/div><\/div><\/div>\n<\/div>\n\n\n<div style=\"height:18px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n<\/div><\/div>\n\n\n\n","protected":false},"excerpt":{"rendered":"<p>Phishing scams are emails or other messages that appear to come from a known sender, but are actually sent by hackers or other dangerous entities. Phishing emails often ask a user to click on a fraudulent link, or request personal information such as a password or banking information. Phishing scams are increasingly prevalent. Although a&hellip;&NewLine;<a href=\"https:\/\/dev.is.wfu.edu\/infosec\/phishing\/\" title=\"Read more on Phishing\">Read More &raquo;<\/a><\/p>\n","protected":false},"author":1,"featured_media":434,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"acf":[],"_links":{"self":[{"href":"https:\/\/dev.is.wfu.edu\/infosec\/wp-json\/wp\/v2\/pages\/433"}],"collection":[{"href":"https:\/\/dev.is.wfu.edu\/infosec\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/dev.is.wfu.edu\/infosec\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/dev.is.wfu.edu\/infosec\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dev.is.wfu.edu\/infosec\/wp-json\/wp\/v2\/comments?post=433"}],"version-history":[{"count":32,"href":"https:\/\/dev.is.wfu.edu\/infosec\/wp-json\/wp\/v2\/pages\/433\/revisions"}],"predecessor-version":[{"id":600,"href":"https:\/\/dev.is.wfu.edu\/infosec\/wp-json\/wp\/v2\/pages\/433\/revisions\/600"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dev.is.wfu.edu\/infosec\/wp-json\/wp\/v2\/media\/434"}],"wp:attachment":[{"href":"https:\/\/dev.is.wfu.edu\/infosec\/wp-json\/wp\/v2\/media?parent=433"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}