Office of Information Security

Spear phishing

October 31, 2023

Recognize and report phishing

It’s the final day of National Cybersecurity Awareness Month and our final national theme is (drum roll, please): Recognize and report phishing (and scams) Phishing is a form of email fraud in which cyber criminals and other adversaries attempt to entice you to click on links or download attachments so that they can steal valuable…

September 16, 2022

Attackers who build trust target universities

phishing for passwords

This month security firm Mandiant published a blog post and threat intelligence report about a state-sponsored Advanced Persistent Threat (APT) group known as APT42. Formerly known as UNC788, APT42 is said to be a “prolific and well-resourced threat actor” that has used credential harvesting, surveillance operations, and malware distribution to target over 30 organizations of…